14 matches found
Missing Authentication For Critical Function
Filament is vulnerable to Missing Authentication For Critical Function. The vulnerability is due to failure to consistently require current-password confirmation for app-based multi-factor authentication MFA management actions, which allows an attacker with access to an authenticated user session...
CVE-2026-48949
Lack of validation leads to an XSS vulnerability in the MFA management views...
CVE-2026-48949
Lack of validation leads to an XSS vulnerability in the MFA management views...
CVE-2026-48949: Improper Neutralization of Input During Web Page Generation
Lack of validation leads to an XSS vulnerability in the MFA management views...
CVE-2026-5175: Missing Authorization
Improper access control in the multi-factor authentication MFA management API in Devolutions Server allows an authenticated attacker to delete their own configured MFA factors and reduce account protection to password-only authentication via crafted HTTP requests. This issue affects Server: from...
BIT-JOOMLA-2024-21722 [20240201] - Core - Insufficient session expiration in MFA management views
The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified...
CVE-2024-21722
The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified...
Veeam My Account Portal - MFA Guide
Veeam Data Cloud MFA Requirements As of July 7, 2026, logging in to Veeam Data Cloud cloud.veeam.com using the Continue with Veeam authentication option now requires that your Veeam Account have Multi-Factor Authentication MFA enabled. If you use the Continue with Microsoft authentication option,...
CVE-2024-21722
The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified...
Information disclosure
The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified...
Joomla! patches XSS flaws that could lead to remote code execution
On February 20, Joomla! posted details about four vulnerabilities it had fixed in its Content Management System CMS, and one in the Joomla! Framework that affects the CMS. Joomla! is an open-source CMS that’s been around since 2005, and has been one of the most popular CMS platforms by market sha...
Joomla! 5.x < 5.0.3 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 1.5.x prior to 4.4.3 or 5.x prior to 5.0.3. It is, therefore, affected by multiple vulnerabilities. - An insufficient session expiration in MFA management views. CVE-2024-21722 - An open redirect i...
CVE-2024-21722 [20240201] - Core - Insufficient session expiration in MFA management views
The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified...