Skip to content
OpenAdvisories

Package · Packagist

codiad/codiad

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2020-23355

    Codiad Vulnerable to PHP Magic Hash Vulnerability

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass. If encrypted or hash value for the passwords form certain formats of magic hash, e.g, 0e123, another hash …

    codiad/codiad Packagist
  • High 8.8
    CVE-2020-14043

    Codiad CSRF Vulnerability

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only available to admin users and it isn't CSRF protected in components/…

    codiad/codiad Packagist
  • High 7.2
    CVE-2020-14044

    Codiad SSRF Vulnerability

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later. A user with admin privileges could use the plugin install feature to make the server request any URL via components/market/class…

    codiad/codiad Packagist