CVE-2020-12735

reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...

CVE-2020-12735

reset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to account takeover...

CVE-2020-12735

DomainMOD 4.13.0 suffers a vulnerability in reset.php due to insufficient entropy in password reset requests, which can lead to account takeover. Affected component: reset functionality in DomainMOD; root cause described as low-entropy or predictable reset token handling. CVSS data is provided (b...