Skip to content
OpenAdvisories

Package · Packagist

verbb/knock-knock

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.1
    CVE-2020-13485

    Knock Knock plugin IP Whitelist bypass via an X-Forwarded-For HTTP header

    The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.

    verbb/knock-knock Packagist
  • Medium 6.1
    CVE-2020-13486

    Knock Knock plugin Open redirection vulnerability

    The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.

    verbb/knock-knock Packagist