Lucene search
K

CVE-2021-36804 Akaunting Password Reset Relay

🗓️ 04 Aug 2021 22:20:44Reported by rapid7Type 
cvelist
 cvelist
🔗 www.cve.org👁 16 Views

Akaunting version 2.1.12 and earlier has a password reset spoofing vulnerability allowing an attacker to proxy reset requests through the system

Related
Affected
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2021-36804
5 Aug 202103:23
circl
CNNVD
Akaunting 授权问题漏洞
4 Aug 202100:00
cnnvd
CVE
CVE-2021-36804
4 Aug 202122:20
cve
EUVD
EUVD-2021-1945
7 Oct 202500:30
euvd
Github Security Blog
Malicious password-reset in Akaunting
1 Sep 202118:31
github
GitLab Advisory Database
Weak Password Recovery Mechanism for Forgotten Password
1 Sep 202100:00
gitlab
NVD
CVE-2021-36804
4 Aug 202123:15
nvd
OSV
GHSA-246R-R2WF-FRHX Malicious password-reset in Akaunting
1 Sep 202118:31
osv
Prion
Spoofing
4 Aug 202123:15
prion
Rapid7 Blog
Multiple Open Source Web App Vulnerabilities Fixed
27 Jul 202114:30
rapid7blog
Rows per page
[
  {
    "product": "Akaunting",
    "vendor": "Akaunting",
    "versions": [
      {
        "lessThanOrEqual": "2.1.12",
        "status": "affected",
        "version": "2.1.12",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

04 Aug 2021 22:20Current
8.3High risk
Vulners AI Score8.3
CVSS 3.15.4
EPSS0.00957
16