CVE-2024-50478
Authentication Bypass by Primary Weakness vulnerability in Swoop 1-Click Login: Passwordless Authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication: 1.4.5.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 1.12%
- CWE
- CWE-305, CWE-305
- Published
- 2024-10-28
- Last modified
- 2026-04-23
Affected products
- Swoop 1-Click Login: Passwordless Authentication
- swoopbrandon 1-Click Login: Passwordless Authentication
Weakness type
Related vulnerabilities
- CVE-2025-31161 — CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unle
- CVE-2023-34124 — The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authenticatio
- CVE-2021-26102 — A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remot
- CVE-2023-0777 — Authentication Bypass by Primary Weakness in modoboa/modoboa
- CVE-2022-2651 — Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm
- CVE-2026-81578 — PaperCut MF/NG: Authentication Bypass
- CVE-2026-25555 — OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header
- CVE-2025-24522 — KUNBUS Revolution Pi Authentication Bypass by Primary Weakness