Description

Appweb before 7.0.3 has a logic flaw. An attacker can bypass the webserver's authentication with a specially crafted HTTP request.

Remediation

Upgrade to the latest version of AppWeb

References

AppWeb Authentication Bypass

Related Vulnerabilities

WordPress Plugin FireStats Multiple Cross-Site Scripting and Authentication Bypass Vulnerabilities (1.0.2)

WordPress Plugin Gutenberg & Elementor Templates Importer For Responsive Security Bypass (2.2.5)

WordPress Plugin Header Enhancement Security Bypass (1.4.3)

WordPress Plugin Easy WP SMTP Security Bypass (1.4.2)

WordPress Plugin Improved Product Options for WooCommerce Security Bypass (5.2.0)

Severity

High

Classification

CWE-287 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Authentication Bypass