Packagist/winter/wn-dusk-plugin CVE-2024-32003: high 8.8, EPSS 0.67%
Dusk plugin may allow unfettered user authentication in misconfigured installs
Action: Upgrade winter/wn-dusk-plugin to 2.1.0 or later.
composer require winter/wn-dusk-plugin:2.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.0 | - |
Fixed versions
| 2.1.0 |
Sources
- osv: GHSA-chcp-g9j5-3xxx
- https://github.com/wintercms/wn-dusk-plugin/security/advisories/GHSA-chcp-g9j5-3xxx
- https://nvd.nist.gov/vuln/detail/CVE-2024-32003
- https://github.com/wintercms/wn-dusk-plugin
- https://github.com/wintercms/wn-dusk-plugin/blob/main/README.md
CVE-2024-32003 · published · modified · JSON