Default credentials

2021-01-2618:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.0%

JSON

reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter).

CPENameOperatorVersion
projectsendeq< r1295

CPE	Name	Operator	Version
	projectsend	eq	< r1295

References

projectsend.com

github.com/projectsend/projectsend/commit/440204734e9a1687cb9887e1c887173d23c5a93e

github.com/projectsend/projectsend/commits/master

github.com/projectsend/projectsend/releases/tag/r1295

github.com/varandinawer/CVE-2020-28874