MK
Product
Mk-auth
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 4Low 0
Watch
Add Mk-auth to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-27246 | 8.8 | Mar 28 | An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted .htaccess file Affected: through 23.01k4.9 |
| CVE-2021-21495 | 8.8 | Jan 4 | MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI Affected: through 19.01 |
Showing 2
