What is GHSA-8qfm-h8rh-h3r7?

GHSA-8qfm-h8rh-h3r7 is a security advisory published by GitHub Security Advisories with Critical severity. PHPMemcachedAdmin Path Traversal vulnerability

Which CVE IDs does GHSA-8qfm-h8rh-h3r7 cover?

GHSA-8qfm-h8rh-h3r7 covers the following CVE IDs: CVE-2023-6026. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8qfm-h8rh-h3r7?

GHSA-8qfm-h8rh-h3r7 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-8qfm-h8rh-h3r7?

GHSA-8qfm-h8rh-h3r7 affects 1 product, including: composer/elijaa/phpmemcacheadmin:\u003c= 1.3.0.

GHSA-8qfm-h8rh-h3r7CriticalCVSS 9.8

PHPMemcachedAdmin Path Traversal vulnerability

Vendor

GitHub Security Advisories

Published

November 30, 2023

Last Modified

December 18, 2023

🔗 CVE IDs covered (1)

CVE-2023-6026 →

📋 Description

A Path traversal vulnerability has been reported in elijaa/phpmemcachedadmin affecting version 1.3.0. This vulnerability allows an attacker to delete files stored on the server due to lack of proper verification of user-supplied input.

🎯 Affected products1

composer/elijaa/phpmemcacheadmin:<= 1.3.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2023-6026
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-phpmemcachedadmin
https://packagist.org/packages/elijaa/phpmemcacheadmin
https://github.com/FriendsOfPHP/security-advisories/blob/master/elijaa/phpmemcacheadmin/CVE-2023-6026.yaml
https://github.com/advisories/GHSA-8qfm-h8rh-h3r7