CVE-2022-42461

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/miniorange-2-factor-authentication/wordpress-miniorange-s-google-authenticator-plugin-5-6-1-broken-access-control-vulnerability · Third Party Advisory

Lỗ hổng khác của google authenticator

• CVE-2022-44589CAO 7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator – WordPress Two Fac…
• CVE-2022-4943TRUNG BÌNH 5.3The miniOrange's Google Authenticator plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when chan…
• CVE-2022-1321TRUNG BÌNH 4.8The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, leading to malicious …
• CVE-2022-0875TRUNG BÌNH 4.3The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as e…
• CVE-2022-0229CAO 8.1The miniOrange's Google Authenticator WordPress plugin before 5.5 does not have proper authorisation and CSRF checks when handling the recon…