Labdigital Wagtail-2fa
2 CVEs affecting Labdigital Wagtail-2fa. Latest disclosed: 2020-03-13. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-16766 | High | 8.7 | 2019-11-29 | When using wagtail-2fa before 1.3.0, if someone gains access to someone's Wagtail login credentials, they can log into the CMS and bypass the 2FA check by chan… |
CVE-2020-5240 | High | 7.6 | 2020-03-13 | In wagtail-2fa before 1.4.1, any user with access to the CMS can view and delete other users 2FA devices by going to the correct path. The user does not requir… |