Vulnerability	Vulnerable Version
M Access Restriction Bypass `authbwc` is a user authentication and authorization component for the BlazeWeb framework. Affected versions of this package are vulnerable to Access Restriction Bypass via the password reset process. It allowed inactive users to login.	[,0.3.1)
L Privilege Escalation `authbwc` is a user authentication and authorization component for the BlazeWeb framework. Affected versions of this package are vulnerable to Privilege Escalation. It was possible for a user to gain the permissions of the user logged in previously due to the way the HTTP session user permissions were loaded. A malicious user can log in after an admin has been logged in and not logged out, and gain their privileges.	[,0.1.4)

Access Restriction Bypass

authbwc is a user authentication and authorization component for the BlazeWeb framework.

Affected versions of this package are vulnerable to Access Restriction Bypass via the password reset process. It allowed inactive users to login.

[,0.3.1)

Privilege Escalation

authbwc is a user authentication and authorization component for the BlazeWeb framework.

Affected versions of this package are vulnerable to Privilege Escalation. It was possible for a user to gain the permissions of the user logged in previously due to the way the HTTP session user permissions were loaded. A malicious user can log in after an admin has been logged in and not logged out, and gain their privileges.

[,0.1.4)

Go back to all versions of this package