HIGH🇵🇱 Wersja polska

CVE-2023-46393

CVSS 7.5v3.1pub. 2023-10-27upd. 2024-11-21

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • Gougucms

    APP
    Gougucms
    4.08.18
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-46394MEDIUM5.4ten sam produkt

A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attack...

CVE-2023-3035LOW3.5ten sam vendor

A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as probl...