Approved changes feed: RSS · Atom

cpe:2.3:a:humhub:humhub:1.3.12:*:*:*:*:*:*:*

part: a version: 1.3.12 update: *

VendorHumhub (207df78f-b45f-5aa6-92d9-43f6e5adcae3)
ProductHumhub (b59ff62f-0863-5fcb-b1d3-5eb2527f120a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/jasoncain/humhub purl2cpe 2026-06-01 10:15:38.356777
pkg:github/humhub/humhub purl2cpe 2026-06-01 10:15:38.356779
pkg:rpm/opensuse/humhub purl2cpe 2026-06-01 10:15:38.356780
pkg:sourceforge/humhub purl2cpe 2026-06-01 10:15:38.356781

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11564 vulnerable 2026-06-08 05:12:37.670616 Details available
A cross-site scripting (XSS) vulnerability in HumHub 1.3.12 allows remote attackers to inject arbitrary web script or HTML via a /protected/vendor/codeception/codeception/tests/data/app/view/index.php POST request.
Published: 2019-05-08T15:45:53.000Z
Updated: 2024-08-04T22:55:40.958Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.