Open-source package vulnerability · Composer (PHP)
GHSA-q3jm-v27q-jfww: titon/framework vulnerable to Remote Code Execution via Chosen-Ciphertext Attack
criticalCVSS 3.1 9.8
titon/framework package (which is now abandoned and no longer maintained) is vulnerable to remote code execution via Chosen-Ciphertext Attack.
Published May 30, 2024
Affected packages
titon/framework
- Ecosystem
- Composer (PHP)
- Affected
- <= 0.1.0-alpha
- Fixed in
- No patched version yet
- Check
composer show titon/framework
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
titon/framework package (which is now abandoned and no longer maintained) is vulnerable to remote code execution via Chosen-Ciphertext Attack.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology