Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rr2v-7hf7-65mj

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which makes it easier for remote attackers to change a password after hijacking a session.

Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which makes it easier for remote attackers to change a password after hijacking a session.

EPSS

Процентиль: 67%
0.00548
Низкий

Связанные уязвимости

ubuntu
почти 17 лет назад

Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which makes it easier for remote attackers to change a password after hijacking a session.

nvd
почти 17 лет назад

Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which makes it easier for remote attackers to change a password after hijacking a session.

debian
почти 17 лет назад

Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password duri ...

EPSS

Процентиль: 67%
0.00548
Низкий