PT-2024-22373 · Web-Flash · Web-Flash

Name of the Vulnerable Software and Affected Versions: web-flash version 3.0 Description: An issue in web-flash allows attackers to reset passwords for arbitrary users via a crafted POST request to "/prod-api/user/resetPassword". Recommendations: For web-flash version 3.0, consider disabling the...