medium6.5
CVE-2020-26136
In SilverStripe through 4.6.0-rc1, GraphQL doesn't honour MFA (multi-factor authentication) when using basic authentication.
Impact
In SilverStripe through 4.6.0-rc1, GraphQL doesn't honour MFA (multi-factor authentication) when using basic authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silverstripe | Silverstripe | before 4.6.0 Version 4.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://forum.silverstripe.org/c/releases
- https://www.silverstripe.org/blog/tag/release
- https://www.silverstripe.org/download/security-releases/
- https://www.silverstripe.org/download/security-releases/cve-2020-26136
- https://forum.silverstripe.org/c/releases
- https://www.silverstripe.org/blog/tag/release
- https://www.silverstripe.org/download/security-releases/
- https://www.silverstripe.org/download/security-releases/cve-2020-26136