CVE-2020-11094
1 advisory.
Packagist/rainlab/debugbar-plugin CVE-2020-11094: medium 6.1, EPSS 1.05%
Potential unauthorized access to stored request & session data when plugin is misconfigured in October CMS Debugbar
Action: Upgrade rainlab/debugbar-plugin to 3.1.0 or later.
composer require rainlab/debugbar-plugin:3.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-c8wh-6jw4-2h79
- https://github.com/rainlab/debugbar-plugin/security/advisories/GHSA-c8wh-6jw4-2h79
- https://nvd.nist.gov/vuln/detail/CVE-2020-11094
- https://github.com/rainlab/debugbar-plugin/commit/86dd29f9866d712de7d98f5f9dc67751b82ecd18
CVE-2020-11094 · published · modified · JSON