Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-5657

CraftCMS Plugin - Two-Factor Authentication - Password Hash Disclosure

The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Born05
Products
Two-factor Authentication
CVE-2024-5658

CraftCMS Plugin - Two-Factor Authentication - TOTP Token Stays Valid After Use

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Born05
Products
Craft Cms Two-factor Authentication