Flarum: Mishandling of User Email Tokens
Summary
CVE-2019-11514: Flarum mishandles invalidation of user email tokens. Affects flarum/flarum versions < 0.1.0-beta.8. Fixed in 0.1.0-beta.8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Flarum is an open-source forum software built with PHP and Laravel. It provides a platform for online discussions and community engagement. The software allows users to register, create discussions, and interact with other members. Flarum is widely used by various online communities and organizations.
Vulnerability Detail
The vulnerability in Flarum, specifically in the User/Command/ConfirmEmailHandler.php file, allows for mishandling of user email tokens. This vulnerability occurs when the system fails to properly invalidate email tokens, leading to potential security risks. An attacker could exploit this vulnerability to gain unauthorized access to user accounts or perform other malicious activities. The severity of this vulnerability is rated as HIGH with a CVSS score of 7.5.
How To Fix
Minimum fixed version
0.1.0-beta.8
This is the first release that contains the fix.
composer require flarum/flarum:0.1.0-beta.8Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is crucial to update the Flarum software to the latest version to address the issue effectively.
Conclusion
Flarum users should update their installations to version 0.1.0-beta.8 or later to address the mishandling of user email tokens vulnerability. This will ensure the proper invalidation of email tokens and mitigate the risk of unauthorized access or other malicious activities. For further support or assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for flarum/flarum →
FAQ
This vulnerability could potentially allow attackers to gain unauthorized access to user accounts or perform other malicious activities within the Flarum forum software.
You can use the Vulert Playground at Vulert Scanner to check if your Flarum installation is affected by this vulnerability. Simply provide your composer.lock file, and Vulert will analyze it for any open-source vulnerabilities, including this one.
At the time of this advisory, there are no known public exploits targeting this specific vulnerability. However, it is essential to update your Flarum installation to the latest version to prevent any potential exploitation.
It is highly recommended to update Flarum to the latest version to fix this vulnerability. Manual fixes may not address all aspects of the issue and could leave your installation at risk.
For more information about this vulnerability, you can refer to the GitHub Security Advisory GHSA-g6w5-439m-jhwv at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-g6w5-439m-jhwv/GHSA-g6w5-439m-jhwv.json
