Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-43847

Authorization Bypass in Space Invite in HumHub

Description

HumHub is an open-source social network kit written in PHP. Prior to HumHub version 1.10.3 or 1.9.3, it could be possible for registered users to become unauthorized members of private Spaces. Versions 1.10.3 and 1.9.3 contain a patch for this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

humhub humhub

  • >= 1.10.0, < 1.10.3affected
  • < 1.9.3affected

References