GHSA-g8pg-33v4-9r96
Thelia authentication bypass vulnerability
An authentication bypass was identifed in thelia/thelia project for customer and admin. This vulnerability is present from version 2.0.0-beta1 and is fixed in 2.1.3 and 2.2.0-alpha1.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
What each source reports
GitHub Advisories Score used
Thelia authentication bypass vulnerability
An authentication bypass was identifed in thelia/thelia project for customer and admin. This vulnerability is present from version 2.0.0-beta1 and is fixed in 2.1.3 and 2.2.0-alpha1.
- Record
GHSA-g8pg-33v4-9r96- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
OSV
Thelia authentication bypass vulnerability
An authentication bypass was identifed in thelia/thelia project for customer and admin. This vulnerability is present from version 2.0.0-beta1 and is fixed in 2.1.3 and 2.2.0-alpha1.
- Record
GHSA-g8pg-33v4-9r96- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thelia/theliaPackagist | 2.0.0-beta1 up to 2.1.3 | 2.1.3 |
thelia/theliaPackagist | 2.0.0-beta1 up to 2.1.3, plus listed versions 2.0.02.0.0-RC12.0.0-beta22.0.0-beta32.0.0-beta4 Show 21 moreShow less2.0.12.0.102.0.112.0.122.0.22.0.32.0.3-beta2.0.3-beta22.0.42.0.52.0.62.0.72.0.82.0.92.1.02.1.0-alpha12.1.0-alpha22.1.0-beta12.1.0-beta22.1.12.1.2 | 2.1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-g8pg-33v4-9r96 is a high vulnerability (CVSS 7.5) in thelia/thelia, published May 30, 2024. No source lists public exploit code. Fixed in thelia/thelia 2.1.3.
References
github.com/thelia/thelia/commit/028cfcf507cd8685772e156ec0c860034d407094
web.archive.org/web/20160502224630/http://thelia.net/version-2-1-3-with-security-fix