← All advisories

Critical severityNVD Advisory· Published Mar 28, 2022· Updated Aug 3, 2024

CVE-2021-26600

CVE-2021-26600

Description

ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
impresscms/impresscmsPackagist	< 1.4.3	1.4.3

Affected products

2

Impresscms/Impresscmscpe-rescue
ghsa-coords
pkg:composer/impresscms/impresscms
Range: < 1.4.3

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-m8xh-cqc2-5q6fghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-26600ghsaADVISORY
karmainsecurity.com/KIS-2022-01ghsax_refsource_MISCWEB
packetstormsecurity.com/files/166393/ImpressCMS-1.4.2-Authentication-Bypass.htmlghsax_refsource_MISCWEB
seclists.org/fulldisclosure/2022/Mar/43ghsax_refsource_MISCWEB
github.com/ImpressCMS/impresscms/releases/tag/v1.4.3ghsaWEB
hackerone.com/reports/1081986ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.