Skip to content
OpenAdvisories
Critical · 9.4 CVE-2023-6718 EUVD-2023-0293GHSA-mf7f-pmf6-v68pPYSEC-2023-293

Authentication Bypass Using an Alternate Path or Channel in Repox

Published Dec 13, 2023 · Updated Oct 1, 2024 · Assigned by INCIBE

Description

An authentication bypass vulnerability has been found in Repox, which allows a remote user to send a specially crafted POST request, due to the lack of any authentication method, resulting in the alteration or creation of users.

Affected products

VendorProductAffectedFixed
Repox Repox ≤ 2.3.7 —

References