eZ Platform Admin UI Password reset vulnerability

🗓️ 15 May 2024 21:14:48Reported by GitHub Advisory DatabaseType

eZ Platform Admin UI Password reset vulnerability. Severe vulnerability in eZ Platform Admin UI 2.x allows brute force attack on password reset, risk of user account compromise. Update to fix. Consider changing password reset request time for stronger security

Vulners

Node

ezsystems ezplatform-userRange1.0.0–1.0.1composer

Source	Link
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezplatform-user/2019-04-03-1.yaml
web	www.web.archive.org/web/20201025103933/https://share.ez.no/community-project/security-advisories/ezsa-2019-002-password-reset-vulnerability
github	www.github.com/advisories/GHSA-hfpp-2vhw-qq43

15 May 2024 21:14Current

7.3High risk

Vulners AI Score7.3

CWE-307

ez platform admin ui password reset vulnerability brute force attack user accounts configuration change security update composer ezsystems user management