The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm involving an increment that allows a malicious user to change any user's account password include the admin account...
8.8CVSS7AI score0.01001EPSS
SaveExploits1
RedhatCVE•added 2025/05/22 3:22 p.m.•5 views
CVE-2020-25727
The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to inject a query within the email input field...