TI-2018-14424 CVE-2018-20371 · GHSA-h58x-cvf6-hg3fPhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes…Priority MEDIUM 45PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers to bypass intended GET restrictions via a brute-force approach, as demonstrated by "GET /login.html…CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01579 · Published 2018-12-23 · No fix listed CWE-200
