THREAT OPS › Threat News › [GHSA] GHSA-mf8r-wm2w-f8c5 (medium) — phpMyFAQ public FAQ APIs expose inactive FAQ content
[GHSA] GHSA-mf8r-wm2w-f8c5 (medium) — phpMyFAQ public FAQ APIs expose inactive FAQ content
GHSA-mf8r-wm2w-f8c5 Severity: medium CVE: None
phpMyFAQ public FAQ APIs expose inactive FAQ content
## Affected Product
phpMyFAQ
## Affected Versions
- Confirmed affected: 4.1.4, API v3.1. - Confirmed affected: current main / 4.2-style source, API v4.0, for `GET /api/v4.0/faqs/tags/{tagId}` when `api.onlyActiveFaqs=true`.
## Patched Versions
4.1.5.
## Description
The public FAQ API applie
Indicators of compromise
- probe@example.testemail
Original source: https://github.com/advisories/GHSA-mf8r-wm2w-f8c5