CVE-2024-54141 | THREATINT

Description

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0.

PUBLISHED Reserved 2024-11-29 | Published 2024-12-06 | Updated 2024-12-06 | Assigner GitHub_M

HIGH: 8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Problem types

CWE-209: Generation of Error Message Containing Sensitive Information

Product status

< 4.0.0

affected

References

github.com/...pMyFAQ/security/advisories/GHSA-vrjr-p3xp-xx2x

github.com/...ommit/b9289a0b2233df864361c131cd177b6715fbb0fe

cve.org (CVE-2024-54141)

nvd.nist.gov (CVE-2024-54141)

Download JSON