Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fcmx-4fpp-mg5q

Опубликовано: 23 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.5
CVSS3: 5.3

Описание

A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.

A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.

EPSS

Процентиль: 37%
0.00156
Низкий

5.5 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-640

Связанные уязвимости

CVSS3: 5.3
nvd
3 месяца назад

A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.

EPSS

Процентиль: 37%
0.00156
Низкий

5.5 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-640