PT-2022-7901 · Humhub · Humhub

Tim Coen · Published 2022-06-09 · Updated 2022-06-27 · CVE-2017-20028

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HumHub versions 0.20.1 through 1.0.0-beta.3

Description A critical issue has been found, affecting an unknown part of the software, leading to privilege escalation. The attack can be initiated remotely.

Recommendations For HumHub versions 0.20.1 through 1.0.0-beta.3, upgrade to version 1.0.0 to address this issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2017-20028

Affected Products

Humhub

References · 5

• https://osv.dev/vulnerability/CVE-2017-20028 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-20028 · Security Note
• http://seclists.org/fulldisclosure/2017/Mar/48 · Note
• https://vuldb.com/?id.98925 · Note
• https://t.me/cvenotify/31383 · Telegram Post