Beveiligingsadvies

CVE-2023-50172

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-10 15:48:08
Laatst bijgewerkt 2025-11-04 18:20:29
Toegewezen door talos
CVSS-score 5.3
Status PUBLISHED

Beschrijving

A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to the silent creation of a recovery pass code for any user.