Beveiligingsadvies

CVE-2021-24148

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-03-18 14:57:50

Laatst bijgewerkt 2024-08-03 19:21:18

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address.

← Alle CVE's bekijken Bekijk op cve.org ↗