Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-32648 — Provides a manual patch for October CMS authentication bypass vulnerabilities CVE-2021-32648 and CVE-2021-29487 by converting loose to strict comparisons in User.php. | Kitploit
Tools/GitHubGitHub/daftspunk/cve-2021-32648
Vulnerability AnalysisCode AnalysisWeb SecurityAuthentication
GitHubdaftspunk/cve-2021-32648

CVE-2021-32648

Provides a manual patch for October CMS authentication bypass vulnerabilities CVE-2021-32648 and CVE-2021-29487 by converting loose to strict comparisons in User.php.

View Repository
114 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-32648

Patch your code for October CMS Auth Bypass CVE-2021-32648

Instructions

  1. Open the file vendor/october/rain/src/Auth/Models/User.php
  2. Perform the patch found in these diff notes
  3. Save the file

Overview

You are converting a loose comparison to a strict comparison by replacing two (2) equal signs == with three (3) equal signs ===. This blocks the attack vector as described in CVE-2021-32648 and also CVE-2021-29487.

This issue has been patched in October CMS Build 472 (v1.0.472+) and v1.1.5+. This issue does not affect v2.0.0+.

Download Tool