Unrated severityNVD Advisory· Published Jan 27, 2021· Updated Aug 4, 2024
CVE-2020-23361
CVE-2020-23361
Description
phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
Affected products
2- phpList/phpListdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/phpList/phplist3/issues/668mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.