high8.8
CVE-2021-45379
Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability.
Impact
Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Glewlwyd Project | Glewlwyd | from 2.0.0 before 2.6.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/babelouest/glewlwyd/commit/125281f1c0d4b6a8b49f7e55a757205a2ef01fbe
- https://github.com/babelouest/glewlwyd/releases/tag/v2.6.1
- https://github.com/babelouest/glewlwyd/commit/125281f1c0d4b6a8b49f7e55a757205a2ef01fbe
- https://github.com/babelouest/glewlwyd/releases/tag/v2.6.1