Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2020/03/27 12:47 p.m.39 views

CVE-2020-1772 Information Disclosure

It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Tokens, generated by users which already requested new passwords. This issue affects: OTRS Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15...

6.5CVSS7.5AI score0.01622EPSS
SaveExploits0References6
Rows per page
Query Builder