Knock Knock

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2020-13485	Verbb Knock Knock	Cri	0.59	9.1	0.01		May 25, 2020	The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
CVE-2020-13486	Verbb Knock Knock	Med	0.40	6.1	0.01		May 25, 2020	The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.

CVE-2020-13485CriMay 25, 2020
Verbb
Knock Knock
risk 0.59cvss 9.1epss 0.01
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
CVE-2020-13486MedMay 25, 2020
Verbb
Knock Knock
risk 0.40cvss 6.1epss 0.01
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.