https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 18:06:44 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-50577 cnvd-2021-50577 https://cve.radiocsirt.org/vuln/cnvd-2021-50577 https://cve.radiocsirt.org/vuln/euvd-2026-45931 EUVD-2026-45931 https://cve.radiocsirt.org/vuln/euvd-2026-45931 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26136 <p>In SilverStripe through 4.6.0-rc1, GraphQL doesn&#39;t honour MFA (multi-factor authentication) when using basic authentication.</p> <p>In SilverStripe through 4.6.0-rc1, GraphQL doesn&#39;t honour MFA (multi-factor authentication) when using basic authentication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-26136 https://cve.radiocsirt.org/vuln/ghsa-mg2g-8pwj-r2j2 <p><strong>Affected:</strong> Packagist: silverstripe/graphql</p> <p>The GraphQL module accepts basic-auth as an authentication method by default. This can be used to bypass MFA authentication if the silverstripe/mfa module is installed, which is now a commonly installed module. A users password is still required though.</p> <p>Basic-auth has been removed as a default authentication method. If desired, it can be re-enabled by adding it to the authenticators key of a schema, or on SilverStripe\Graphql\Auth\Handler</p> <p><strong>Affected:</strong> Packagist: silverstripe/graphql</p> <p>The GraphQL module accepts basic-auth as an authentication method by default. This can be used to bypass MFA authentication if the silverstripe/mfa module is installed, which is now a commonly installed module. A users password is still required though.</p> <p>Basic-auth has been removed as a default authentication method. If desired, it can be re-enabled by adding it to the authenticators key of a schema, or on SilverStripe\Graphql\Auth\Handler</p> https://cve.radiocsirt.org/vuln/ghsa-mg2g-8pwj-r2j2 https://cve.radiocsirt.org/vuln/gsd-2020-26136 gsd-2020-26136 https://cve.radiocsirt.org/vuln/gsd-2020-26136