Описание
AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials without authentication.
Ссылки
- Product
- Product
- ExploitThird Party AdvisoryVDB Entry
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:wwbn:avideo:8.1:*:*:*:*:*:*:*
EPSS
Процентиль: 47%
0.00676
Низкий
5.3 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-640
Связанные уязвимости
CVSS3: 5.3
github
4 месяца назад
AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials without authentication.
EPSS
Процентиль: 47%
0.00676
Низкий
5.3 Medium
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-640