GHSA-9xgp-hfw7-73rq

Опубликовано: 19 авг. 2020

Источник: github

Github: Прошло ревью

Описание

Authentication Weakness in keystone

There is an authentication weakness vulnerability in keystone before version 0.3.16. Due to a bug in the the default sign in functionality, incomplete email addresses could be matched. A correct password is still required to complete sign in.

Ссылки

https://github.com/keystonejs/keystone/issues/1085

Пакеты

Наименование

keystone

npm

Затронутые версииВерсия исправления

< 0.3.16

0.3.16