Описание
Disabled users able to log in with third party SSO plugin
Impact
Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address
Patches
Upgrade to 2.12.0 or later.
Workarounds
None.
For more information
If you have any questions or comments about this advisory:
- Email us at security@mautic.org
Пакеты
Наименование
mautic/core
composer
Затронутые версииВерсия исправления
>= 2.0.0, < 2.12.0
2.12.0
Связанные уязвимости
CVSS3: 8.1
nvd
около 8 лет назад
Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address