3 matches found
CVE-2021-26600
ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass != instead of !==...
9.8CVSS0.0563EPSS
SaveExploits3References7
CVE-2021-26600: Access of Resource Using Incompatible Type
ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass != instead of !==...
9.8CVSS8.2AI score0.0563EPSS
SaveExploits3References2
PT-2022-9762
Name of the Vulnerable Software and Affected Versions ImpressCMS versions prior to 1.4.3 Description The issue is related to a type confusion in the autologin.php file within the plugins/preloads directory, leading to an Authentication Bypass. This occurs due to the use of the != operator instead...
9.8CVSS5.7AI score0.0563EPSS
SaveExploits3References12
20