HIGH🇬🇧 English

CVE-2023-46393

CVSS 7.5v3.1pub. 2023-10-27upd. 2024-11-21

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Gougucms

    APP
    Gougucms
    4.08.18
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2023-46394MEDIUM5.4ten sam produkt

A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attack...

CVE-2023-3035LOW3.5ten sam vendor

A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as probl...

CVE-2023-46393 — HIGH 7.5 | CVEbaza.pl