What is GHSA-cx95-q6gx-w4qp?

GHSA-cx95-q6gx-w4qp is a security advisory published by GitHub Security Advisories with High severity. SAK-50571 Sakai Kernel users created with type roleview can login as a normal user

Which CVE IDs does GHSA-cx95-q6gx-w4qp cover?

GHSA-cx95-q6gx-w4qp covers the following CVE IDs: CVE-2024-47876. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-cx95-q6gx-w4qp?

GHSA-cx95-q6gx-w4qp affects 1 product, including: maven/org.sakaiproject.kernel:sakai-kernel-impl:\u003e= 23.0, \u003c 23.3.

GHSA-cx95-q6gx-w4qpHigh

SAK-50571 Sakai Kernel users created with type roleview can login as a normal user

Vendor

GitHub Security Advisories

Published

October 15, 2024

Last Modified

October 15, 2024

🔗 CVE IDs covered (1)

CVE-2024-47876 →

📋 Description

Impact

Illegal access can be granted to the system.

References

see https://sakaiproject.atlassian.net/browse/SAK-50571

🎯 Affected products1

maven/org.sakaiproject.kernel:sakai-kernel-impl:>= 23.0, < 23.3

🔗 References (6)

https://github.com/sakaiproject/sakai/security/advisories/GHSA-cx95-q6gx-w4qp
https://github.com/sakaiproject/sakai/commit/a9aadd9347cfb204515e89ac0163e1be9e56cc41
https://central.sonatype.com/artifact/org.sakaiproject.kernel/sakai-kernel-impl
https://nvd.nist.gov/vuln/detail/CVE-2024-47876
https://sakaiproject.atlassian.net/browse/SAK-50571
https://github.com/advisories/GHSA-cx95-q6gx-w4qp