| Package | Affected versions | Patched versions |
|---|---|---|
| cts web | < 2021.3.24 | 2021.3.24 |
The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged-in account to log out, causing the user to be unable to access the services
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free