Lucene search
+L

2 matches found

OSV
OSV
added 2024/05/27 6:53 p.m.11 views

GHSA-5R8W-66HQ-RC39 silverstripe/framework's pre-existing alc_enc cookies log users in if remember me is disabled

If remember me is on and users log in with the box checked, if the developer then disabled "remember me" function, any pre-existing cookies will continue to authenticate users...

3.1CVSS7AI score
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2024/05/27 6:53 p.m.12 views

silverstripe/framework's pre-existing alc_enc cookies log users in if remember me is disabled

If remember me is on and users log in with the box checked, if the developer then disabled "remember me" function, any pre-existing cookies will continue to authenticate users...

7AI score
SaveExploits0References7Affected Software1
Rows per page
Query Builder