Skip to content
OpenAdvisories

Product · rainlab

debugbar-plugin

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Potential unauthorized access to stored request & session data when plugin is misconfigured in October CMS Debugbar

    The October CMS debugbar plugin before version 3.1.0 contains a feature where it will log all requests (and all information pertaining to each request including session data) whenever it is enabled. This presents a problem if the plugin is ever enabled on a s…