Описание
Thelia authentication bypass vulnerability
An authentication bypass was identifed in thelia/thelia project for customer and admin. This vulnerability is present from version 2.1.0-beta1 and is fixed in 2.1.3 and 2.2.0-alpha1.
Пакеты
Наименование
thelia/thelia
composer
Затронутые версииВерсия исправления
>= 2.1.0-beta1, < 2.1.3
2.1.3
7.5 High
CVSS3
Дефекты
CWE-287
7.5 High
CVSS3
Дефекты
CWE-287