Количество 2
Количество 2
CVE-2018-1000809
privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=<space>&pass= to /validate/check url. This vulnerability appears to have been fixed in 2.23.2.
GHSA-7qqv-r2q4-jxhm
privacyIDEA Improper Input Validation vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2018-1000809 privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=<space>&pass= to /validate/check url. This vulnerability appears to have been fixed in 2.23.2. | CVSS3: 7.5 | 0% Низкий | больше 7 лет назад | |
GHSA-7qqv-r2q4-jxhm privacyIDEA Improper Input Validation vulnerability | CVSS3: 7.5 | 0% Низкий | около 7 лет назад |
Уязвимостей на страницу