Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gp25-qcrf-8649

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack.

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack.

EPSS

Процентиль: 88%
0.04021
Низкий

7.5 High

CVSS3

Дефекты

CWE-330

Связанные уязвимости

CVSS3: 7.5
nvd
больше 16 лет назад

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack.

EPSS

Процентиль: 88%
0.04021
Низкий

7.5 High

CVSS3

Дефекты

CWE-330