From Zero to Shell: Exploiting Default Secrets in CrafterCMS
Double misconfigurations in the default CrafterCMS installation result in a critical vulnerability that allows authentication bypass, leading to administrative access and RCE
All research
Research on Authentication bypass
Articles from across our research that cover this topic.
3 articles
Our Research Story: Unauthenticated RCE in Ametys CMS 4.7.x
Our Research Story: Unauthenticated RCE in Ametys CMS 4.7.x
We Found a Critical Flaw in One of the World's Most Trusted Security Tools
How our research team found a CVSS 9.3 authentication bypass in Coverity, and what happened next.