CVE-2023-34732

CVE-2023-34732 Authenticated Function Abuse for Account Takeover Description An attacker can brute-force any user's password including admins using the userId parameter in the change password functionality and update the user's password to a new one chosen by the attacker. CVSS Score: 8.8 High...