Mrsilaz vulnerabilities
We track 1 vulnerability in Mrsilaz products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 17, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Mrsilaz vulnerabilities
- 8.8 High severity
Extension "E-Mail MFA Provider": Authorization Bypass Through User-Controlled Key
The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider.