titon/framework vulnerable to Remote Code Execution via Chosen-Ciphertext Attack · GHSA-q3jm-v27q-jfww · GitHub Advisory Database · GitHub

titon/framework vulnerable to Remote Code Execution via Chosen-Ciphertext Attack

Critical severity GitHub Reviewed Published May 30, 2024 to the GitHub Advisory Database • Updated May 30, 2024

Package

titon/framework (Composer)

Affected versions

<= 0.1.0-alpha

Patched versions

None

Description

titon/framework package (which is now abandoned and no longer maintained) is vulnerable to remote code execution via Chosen-Ciphertext Attack.

References

Published to the GitHub Advisory Database May 30, 2024

Reviewed May 30, 2024

Last updated May 30, 2024

Severity

Critical

9.8

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H