Medium severityGHSA Advisory· Published Dec 13, 2023
Insecure Direct Object Reference in extension "Content Consent" (content_consent)
CVE-2023-50462
Description
The extension fails to verify whether a specified content element identifier is permitted by the plugin. This enables an unauthenticated user to display various content elements, leading to an insecure direct object reference (IDOR) vulnerability with the potential to expose internal content elements.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
t3s/content-consentPackagist | >= 2.0.0, < 2.0.2 | 2.0.2 |
t3s/content-consentPackagist | < 1.0.3 | 1.0.3 |
Affected products
2Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.