bcvgh/web-flash-Broken-Access-Control-vulnerability

bcvgh/web-flash-Broken-Access-Control-vulnerability

GitHubGitHub
GitHubgithub.com
Releases0
web-flash v3.0 Broken Access Control vulnerability
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-28270↗
8.1 HIGH—

An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request to /prod-api/user/resetPassword.