CVE-2023-25264

An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentication check filter completely by introducing a specially crafted request with relative path segments...

CVE-2023-25264

creationtimestamp| type| source ---|---|--- 2023-02-28 18:27:50+00:00| seen| https://t.me/cibsecurity/59109...

CVE-2023-25264

An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentication check filter completely by introducing a specially crafted request with relative path segments...

CVE-2023-25264

An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentication check filter completely by introducing a specially crafted request with relative path segments...

CVE-2023-25264

CVE-2023-25264 affects Docmosis Tornado prior to 2.9.5. An unauthenticated attacker can bypass the authentication check by sending a crafted request with relative path segments, effectively defeating access controls. Severity is high (CVSS 7.5). If you are using Tornado versions before 2.9.5, upg...