Lucene search
GoogleOSV:GHSA-C32W-3CQH-F6JXHistorySep 02, 2021 - 5:08 p.m.
Weak Password Recovery Mechanism for Forgotten Password
2021-09-0217:08:33
Google
osv.dev
5
dolibarr
password reset
account takeover
software vulnerability
email authentication
EPSS
0.001
Percentile
42.8%
In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low privileged attacker can reset the password of any user in the application using the password reset link the user received through email when requested for a forgotten password.
Related
nvd
nvd
CVE-2021-25957
2021-08-17 15:15:08
github
github
Weak Password Recovery Mechanism for Forgotten Password
2021-09-02 17:08:33
prion
prion
Default credentials
2021-08-17 15:15:00
osv
osv
CVE-2021-25957
2021-08-17 15:15:08
cvelist
cvelist
veracode
veracode
Insecure Password Reset Functionality
2021-08-18 02:38:51
cve
cve
CVE-2021-25957
2021-08-17 15:15:08
ubuntucve
ubuntucve
CVE-2021-25957
2021-08-17 00:00:00