MK
Product
Mk-auth
by Mk-auth · last CVE Mar 28, 2023
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 4Low 0
Watch

Add Mk-auth to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-27246
8.8
1%
Mar 28
An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file
Affected: through 23.01k4.9
CVE-2021-21495
8.8
1%
Jan 4
MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI
Affected: through 19.01
Showing 2