Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
verbb records in CISA KEVNo verbb vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 42
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01355 · Published 2020-05-25 · Fixed in 1.2.8 CWE-697
Priority LOW 28
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0068 · Published 2020-05-25 · Fixed in 1.2.8 CWE-601
