LA
Vendor
Labdigital
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-5240 | WA Wagtail-2fa Labdigital | 8.5 | Mar 13 | In wagtail-2fa before 1.4.1, any user with access to the CMS can view and delete other users 2FA devices by going to the correct path |
| CVE-2019-16766 | WA Wagtail-2fa Labdigital | 8.8 | Nov 29 | When using wagtail-2fa before 1.3.0, if someone gains access to someone's Wagtail login credentials, they can log into the CMS and bypass the 2FA check by changing the URL |