← All advisories

High severity7.5OSV Advisory· Published Apr 25, 2019· Updated Jun 17, 2026

CVE-2019-11514

CVE-2019-11514

Description

User/Command/ConfirmEmailHandler.php in Flarum before 0.1.0-beta.8 mishandles invalidation of user email tokens.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
flarum/flarumPackagist	< 0.1.0-beta.8	0.1.0-beta.8

Affected products

12

Flarum/Flarum10 versions
cpe:2.3:a:flarum:flarum:0.1.0:-:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:flarum:flarum:0.1.0:-:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta5:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta6:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta7:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta7.1:*:*:*:*:*:*
- cpe:2.3:a:flarum:flarum:0.1.0:beta7.2:*:*:*:*:*:*
Flarum/CoreOSV
Range: v0.1.0-beta, v0.1.0-beta.2, v0.1.0-beta.3, …
ghsa-coords
pkg:composer/flarum/flarum
Range: < 0.1.0-beta.8

Patches

Vulnerability mechanics

References

4

github.com/flarum/core/commit/66607a56749339d50620b049701ad4d6a4dafbd7nvdPatchThird Party AdvisoryWEB
discuss.flarum.org/d/17745-flarum-0-1-0-beta-8-releasednvdThird Party AdvisoryWEB
github.com/advisories/GHSA-g6w5-439m-jhwvghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-11514ghsaADVISORY

News mentions

0

No linked articles in our index yet.