Описание
Craft CMS subject to URL forgery
Craft CMS before 2.6.2976 does not prevent modification of the URL in a forgot-password email message.
Пакеты
Наименование
craftcms/cms
composer
Затронутые версииВерсия исправления
< 2.6.2976
2.6.2976
Связанные уязвимости
CVSS3: 5.3
nvd
почти 9 лет назад
Craft CMS before 2.6.2976 does not prevent modification of the URL in a forgot-password email message.