Lucene search
+L

1 matches found

OSV
OSV
added 2025/12/10 6:20 p.m.11 views

GHSA-X93P-W2CH-FG67 Ibexa User Bundle is missing password change validation

Impact The vulnerability is in the password change dialog in the back office. During the transition from v4 to v5 a mistake was made in the validation code which caused the validation of the previous password to not run as expected. This made it possible for a logged in user to change password in...

9.3CVSS6.9AI score0.00139EPSS
SaveExploits0References5
Rows per page
Query Builder