Read the docs

Lab Digital

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Lab Digital records in CISA KEV

No Lab Digital vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wagtail-2fa 2 records MEDIUM

Records

2 records

TI-2019-12547 CVE-2019-16766 · GHSA-89px-ww3j-g2mm

2FA bypass in Wagtail through new device path

Priority MEDIUM 41

When using wagtail-2fa before 1.3.0, if someone gains access to someone's Wagtail login credentials, they can log into the CMS and bypass the 2FA check by changing the URL.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01462 Published 2019-11-29 Fixed in 1.3.0 CWE-290
TI-2020-04296 CVE-2020-5240 · GHSA-9gjv-6qq6-v7qm

2FA bypass through deleting devices in wagtail-2fa

Priority LOW 39

In wagtail-2fa before 1.4.1, any user with access to the CMS can view and delete other users 2FA devices by going to the correct path.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00999 Published 2020-03-13 Fixed in 1.4.1 CWE-285
Open these records in search →