| Package | Affected versions | Patched versions |
|---|---|---|
| yerba | = 6.28≤ 6.3 |
Yerba SACphp 6.3 and earlier allows remote attackers to bypass authentication and gain administrative access via a galleta[sesion] cookie that has a value beginning with 1:1: followed by a username.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free