Comsenz Discuzx
3 CVEs affecting Comsenz Discuzx. Latest disclosed: 2018-12-24. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20423 | High | 8.1 | 2018-12-24 | Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value… |
CVE-2018-20422 | High | 8.1 | 2018-12-24 | Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass authentication by leveraging a non-empty #wechat#common_member_wechatmp to… |
CVE-2018-20424 | Medium | 5.9 | 2018-12-24 | Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to delete the common_member_wechatmp data structure via an ac=unbindmp request to pl… |