CVE-2023-47435 - An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages

CRITICAL

An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages

Published Apr 19, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.63%

An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
2.0.0	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-294

Link	Providers	Tags
https://github.com/blinkfox/hexo-theme-matery/issues/897

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Apr 19, 2024

Updated Aug 2, 2024

Reserved Nov 6, 2023

Updated May 14, 2024

Status Deferred

Modified Jun 17, 2026

Severity n/a

Public date n/a