Lucene search

K
osvGoogleOSV:GHSA-QJ6H-M7XC-R2V3
HistoryMay 17, 2022 - 2:57 a.m.

Froxlor guessable password reset token

2022-05-1702:57:53
Google
osv.dev
3

7.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.3%

Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value.

7.1 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.3%