Glewlwyd is an authentication and authorization server that provides OAuth 2.0 and OpenID Connect capabilities; its vulnerability profile centers on the flagship Glewlwyd application with a durable signal in authentication and access-control weaknesses, including improper authentication logic and path-traversal conditions affecting file access. Current severity, exploitation activity, and detailed exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Glewlwyd Project over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-45379HIGH Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password. | Dec 30, 2021 | 8.8 | 28 | NO | NO |
CVE-2022-29967HIGH static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal. | Apr 29, 2022 | 7.5 | 25 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Glewlwyd Project.
Media articles that mention a CVE ID that affects a product developed by Glewlwyd Project — matched by CVE ID, not by vendor name.