6 matches found
CVE-2023-5844
Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0...
7.2CVSS6.8AI score0.00553EPSS
SaveExploits1
CVE-2023-5844
Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0...
7.2CVSS5.2AI score0.00553EPSS
SaveExploits1References2
CVE-2023-5844
CVE-2023-5844 affects pimcore/admin-ui-classic-bundle prior to version 1.2.0. The root cause is an unverified password change, allowing an attacker to set an old password as the new one, violating password policy. Documented impact per OSV/GHSA entries indicates a password-policy bypass without e...
7.2CVSS6AI score0.00553EPSS
SaveExploits1References2Affected Software1
CVE-2023-5844 Unverified Password Change in pimcore/admin-ui-classic-bundle
Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0...
4.3CVSS7.2AI score0.00553EPSS
SaveExploits1References2
20