Knock Knock
Verbb · 2 CVEs
CVE-2020-13485
CRITICAL
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
May 25, 2020
CVE-2020-13486
MEDIUM
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
May 25, 2020
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2020-13485 | The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header. | CRITICAL | 1.35% | May 25, 2020 |
| CVE-2020-13486 | The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection. | MEDIUM | 0.68% | May 25, 2020 |
Showing 1 to 2 of 2 CVEs