tocsin

Debian/ikiwiki: unknown

Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows remote attackers to bypass authentication, and login to any account for which an OpenID identity is configured

Action: Upgrade ikiwiki to 2.48 or later.

Affected

introducedfixedlast affected
02.48-

Fixed versions

2.48

Sources

published · modified · JSON