WA
Product
Wagtail-2fa
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add Wagtail-2fa to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-16766 | 8.8 | Nov 29 | When using wagtail-2fa before 1.3.0, if someone gains access to someone's Wagtail login credentials, they can log into the CMS and bypass the 2FA check by changing the URL Affected: before 1.3.0 |
| CVE-2020-5240 | 8.5 | Mar 13 | In wagtail-2fa before 1.4.1, any user with access to the CMS can view and delete other users 2FA devices by going to the correct path Affected: before 1.4.1 |
Showing 2