Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
added 2026/04/08 7:15 p.m.13 views

CI4MS Vulnerable to Post-Installation Re-entry via Cache-Dependent Install Guard Bypass

Summary The install route guard in ci4ms relies solely on a volatile cache check cache'settings' combined with .env file existence to block post-installation access to the setup wizard. When the database is temporarily unreachable during a cache miss TTL expiry or admin-triggered cache clear, the...

8.1CVSS6AI score0.00421EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder