Skip to content
OpenAdvisories

Product · redaxo

core

20 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-117532 Public exploit

    REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin

    REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into a predictable state an…