Lucene search
Veracode Vulnerability DatabaseVERACODE:28514HistoryDec 09, 2020 - 4:54 a.m.
Administrative Interface Exposed
2020-12-0904:54:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
administrative interface
kirby cms
security restriction
EPSS
0.001
Percentile
43.9%
kirby CMS does not securely restrict access to the administrative interface. The admin panel installation can be accessed on a .dev domain even though restrictions are set in place to deny access.
References
github.com/getkirby-v2/panel/commit/7f9ac1876bacb89fd8f142f5e561a02ebb725baa
github.com/getkirby/kirby/commit/91e6d077516a6a359a5d16f51fd18306e56dd8f4
github.com/getkirby/kirby/releases/tag/3.3.6
github.com/getkirby/kirby/security/advisories/GHSA-2ccx-2gf3-8xvv
packagist.org/packages/getkirby/cms
packagist.org/packages/getkirby/panel
Related
osv
osv
Kirby .dev domains and some reverse proxy setups were treated as local
2021-01-14 19:15:19
CVE-2020-26253
2020-12-08 02:15:10
cvelist
cvelist
CVE-2020-26253 .dev domains treated as local in Kirby
2020-12-08 01:15:14
prion
prion
Design/Logic Flaw
2020-12-08 02:15:00
cve
cve
CVE-2020-26253
2020-12-08 02:15:10
nvd
nvd
CVE-2020-26253
2020-12-08 02:15:10
github
github
Kirby .dev domains and some reverse proxy setups were treated as local
2021-01-14 19:15:19