reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered an invalid token parameter...
7.5CVSS7.6AI score0.02351EPSS
SaveExploits2References4
Cvelist•added 2021/01/21 3:1 p.m.•45 views
CVE-2020-28874
reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered an invalid token parameter...
