Api Bearer Auth Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Api Bearer Auth Project records in CISA KEV

No Api Bearer Auth Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Api Bearer Auth 1 record LOW

Records

1 record in Api Bearer Auth · all components

TI-2019-12291 CVE-2019-16332 · GHSA-69cc-935m-fh4h

In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not…

LOW 36

In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05672 Published 2019-09-15 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0