| Package | Affected versions | Patched versions |
|---|---|---|
| superuser | ≥ 2.3.5, < 2.4.2 | 2.4.2 |
An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free