CVE-2021-26600
1 advisory.
Packagist/impresscms/impresscms CVE-2021-26600: critical 9.8, EPSS 5.63%
Type Confusion in ImpressCMS
Action: Upgrade impresscms/impresscms to 1.4.3 or later.
composer require impresscms/impresscms:1.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.3 | - |
Fixed versions
| 1.4.3 |
Sources
- osv: GHSA-m8xh-cqc2-5q6f
- https://nvd.nist.gov/vuln/detail/CVE-2021-26600
- https://hackerone.com/reports/1081986
- https://github.com/ImpressCMS/impresscms
- https://github.com/ImpressCMS/impresscms/releases/tag/v1.4.3
- http://karmainsecurity.com/KIS-2022-01
- http://packetstormsecurity.com/files/166393/ImpressCMS-1.4.2-Authentication-Bypass.html
- http://seclists.org/fulldisclosure/2022/Mar/43
CVE-2021-26600 · published · modified · JSON