← CVE Intelligence

CVE-2021-24148

MStore API < 3.2.0 - Authentication Bypass With Sign In With Apple PUBLISHED

Description (CNA)

A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address.

Affected (CNA)

Vendor / productVersions
Unknown / MStore APIaffected 3.2.0 before 3.2.0

CWE

CWE-287

References

ADP enrichment

CVE

No English description supplied.