Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mg6c-xr2j-v4fv

Опубликовано: 08 дек. 2021
Источник: github
Github: Не прошло ревью

Описание

Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function

Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function

EPSS

Процентиль: 58%
0.00364
Низкий

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
около 4 лет назад

Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function

EPSS

Процентиль: 58%
0.00364
Низкий

Дефекты

CWE-287