CVE-2023-46393

High

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users'…

mitre·NVD-CWE-noinfo·Published 2023-10-27

CVSS

7.5

EPSS

0.00

KEV

Exploits

cve.orgen

167 chars

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.

NVDen

167 chars

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.

Se descubrió que gougucms v4.08.18 contiene una vulnerabilidad de envenenamiento por restablecimiento de contraseña que permite a los atacantes restablecer arbitrariamente las contraseñas de los usuarios a través de un paquete manipulado.

CVE-2023-46393

CVSS metrics across sources