Lucene search
+L

1 matches found

OSV
OSV
added 2024/04/12 9:26 p.m.28 views

GHSA-CHCP-G9J5-3XXX Dusk plugin may allow unfettered user authentication in misconfigured installs

The Dusk plugin provides some special routes as part of its testing framework to allow a browser environment such as headless Chrome to act as a user in the Backend or User plugin without having to go through authentication. This route is URL/dusk/login/USER ID/MANAGER - where URL is the base URL...

8.8CVSS8.9AI score0.00672EPSS
SaveExploits0References4
Rows per page
Query Builder