Intel

AIKIDO-2024-10207

jibaymcs/filament-tour is vulnerable to Improper Access Control

Improper Access Control Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Aug 6, 2024

75

High Risk

This Affects:

phpjibaymcs/filament-tour
1.0.0.0 - 3.1.0.5
Fixed in 3.1.0.6
Are you affected? Scan for Free

TL;DR

Affected versions of the package are vulnerable to improper access control, allowing unauthenticated users to access tours and highlights.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

jibaymcs/filament-tour is vulnerable to Improper Access Control in versions 1.0.0.0 - 3.1.0.5.

How to fix this

Upgrade the jibaymcs/filament-tour library to the patch version.