Lucene search

CVE-2020-26061

🗓️ 05 Oct 2020 14:13:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 33 Views🌐 WEB

ClickStudios Passwordstate Vulnerability CVE-2020-2606

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
GithubExploit	Exploit for Missing Authentication for Critical Function in Clickstudios Passwordstate	5 Oct 202014:52	–	githubexploit
NVD	CVE-2020-26061	5 Oct 202014:15	–	nvd
Cvelist	CVE-2020-26061	5 Oct 202013:43	–	cvelist
Prion	Authentication flaw	5 Oct 202014:15	–	prion

Nvd

Node

clickstudios passwordstateRange<8.5

Source	Link
clickstudios	www.clickstudios.com.au/passwordstate-changelog.aspx
github	www.github.com/missing0x00/CVE-2020-26061

Parameter	Position	Path	Description	CWE
password	request body	/account/ResetPassword	Authentication bypass allows unauthenticated users to reset passwords for registered users.	CWE-306
user	request body	/account/ResetPassword	Authentication bypass allows unauthenticated users to reset passwords for registered users.	CWE-306

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Oct 2020 14:15Current

7.8High risk

Vulners AI Score7.8

CVSS25

CVSS37.5

EPSS0.06784

CWE-306