VULNERABILITY INTELLIGENCE

CVE-2020-23361

CVSS score9.8 CRITICAL

EPSS probability1.22%

CISA KEVNot currently listed

Published2021-01-27

Last modified2026-06-17

Description

phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.