TI-2013-01875 CVE-2013-2106 · GHSA-cw83-7chq-q5rp
webauth before 4.6.1 has authentication credential disclosure
Priority LOW 36
webauth before 4.6.1 has authentication credential disclosure
No stanfordnlp vulnerabilities are listed in CISA KEV.
2 records in Webauth · all components
webauth before 4.6.1 has authentication credential disclosure
weblogin/login.fcgi (aka the WebLogin login script) in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which…