Lucene search
GoogleOSV:CVE-2020-28874HistoryJan 26, 2021 - 6:15 p.m.
CVE-2020-28874
2021-01-2618:15:51
Google
osv.dev
1
reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter).
| CPE | Name | Operator | Version |
|---|---|---|---|
| projectsend | eq | r753 | |
| projectsend | eq | r756 | |
| projectsend | eq | r1053 | |
| projectsend | eq | r1070 | |
| projectsend | eq | r559 | |
| projectsend | eq | r754 |
Related
prion
prion
Default credentials
2021-01-26 18:15:00
nvd
nvd
CVE-2020-28874
2021-01-26 18:15:51
cve
cve
CVE-2020-28874
2021-01-26 18:15:51
cvelist
cvelist
CVE-2020-28874
2021-01-21 15:01:48
githubexploit
githubexploit
Exploit for Improper Resource Shutdown or Release in Projectsend
2021-01-21 13:11:30