Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In SilverStripe through 4.6.0-rc1, GraphQL doesn't honour MFA (multi-factor authentication) when using basic authentication.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SilverStripe 授权问题漏洞
Vulnerability Description
Silverstripe SilverStripe是新西兰SilverStripe（Silverstripe）公司的一套开源的编程框架和内容管理系统 (CMS)。该系统具有支持多国语言、跨平台等特点。 SilverStripe 中存在授权问题漏洞，该漏洞源于在使用基本身份验证时，GraphQL不支持MFA(多因素身份验证)。以下产品及型号会受到影响：SilverStripe 4.6.0-rc1
CVSS Information
N/A
Vulnerability Type
N/A