ProjectSend < r1720 Authentication Bypass (CVE-2024-11680)

critical Nessus Plugin ID 271956

Language:

Version 1.12 Apr 16, 2026, 7:20 PM Logic Changes (Added support for specifying hostname in structured data reporting.) Plugin Feed: 202604161920
Version 1.11 Apr 13, 2026, 4:17 PM Detection (Cipher inventory improvements) Plugin Feed: 202604131617
Version 1.10 Apr 6, 2026, 3:39 PM New Plugin Feed: 202604061539
Version 1.8 Mar 9, 2026, 5:15 PM Plugin requirements (Added new scan preference, "Report potential vulnerabilities (components)", so users can decide if they want to scan component installs for potential vulnerabilities.) Plugin Feed: 202603091715
Version 1.7 Feb 6, 2026, 12:54 AM Required Scan configuration (Detected software that is considered a component of another application should only trigger vuln findings when the scan is running in paranoid mode. At this moment in time, this change affects only OpenSSL, Curl, LibCurl , SQLite, PHP, Apache HTTPD and Tomcat. Others may follow at a later date.) Plugin Feed: 202602060054
Version 1.3 Nov 3, 2025, 9:25 PM Logic Changes (Corrects handling base64 encoded HTTP cookies) Plugin Feed: 202511032125
Version 1.2 Oct 30, 2025, 11:01 PM CISA reference CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploitability ease" set to "Exploits are available") Plugin Feed: 202510302301
Version 1.1 Oct 29, 2025, 8:57 PM New Plugin Feed: 202510292057

* Changelogs are generally available for changes made after Nov 1, 2022