1 matches found
GHSA-CHCP-G9J5-3XXX Dusk plugin may allow unfettered user authentication in misconfigured installs
The Dusk plugin provides some special routes as part of its testing framework to allow a browser environment such as headless Chrome to act as a user in the Backend or User plugin without having to go through authentication. This route is URL/dusk/login/USER ID/MANAGER - where URL is the base URL...