2 matches found
Payload didn't enforce field-level password update restrictions
Impact When an auth collection defined a field-level access.update restriction on the password field, the restriction was not enforced on the server correctly. Patches Users should upgrade Payload packages to = 3.90.0 or = 4.0.0-canary.34...
7.6CVSS5.8AI score0.00326EPSS
SaveExploits0References4Affected Software1
PT-2019-7568
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 60.0.25 Description The issue concerns the lack of enforcement of feature-list restrictions when calling the multilang adminbin. Recommendations For versions prior to 60.0.25, update to version 60.0.25 or later to...
3.3CVSS0.00342EPSS
SaveExploits0References4
20