Medium severity6.5NVD Advisory· Published Dec 20, 2021· Updated Jun 17, 2026

CVE-2021-43847

Description

HumHub is an open-source social network kit written in PHP. Prior to HumHub version 1.10.3 or 1.9.3, it could be possible for registered users to become unauthorized members of private Spaces. Versions 1.10.3 and 1.9.3 contain a patch for this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Humhub/Humhub3 versions
cpe:2.3:a:humhub:humhub:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:humhub:humhub:*:*:*:*:*:*:*:*range: <1.9.3
- (no CPE)range: <1.10.3, <1.9.3
- (no CPE)range: >= 1.10.0, < 1.10.3

Patches

Vulnerability mechanics

References

github.com/humhub/humhub/pull/5473nvdPatchThird Party Advisory
github.com/humhub/humhub/security/advisories/GHSA-f5hc-5wfr-7v74nvdExploitThird Party Advisory
huntr.dev/bounties/943dad83-f0ed-4c74-ba81-7dfce7ca0ef2/nvdExploitIssue TrackingPatchThird Party Advisory
github.com/humhub/humhub/releases/tag/v1.10.3nvdRelease NotesThird Party Advisory
github.com/humhub/humhub/releases/tag/v1.9.3nvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000