Beveiligingsadvies

CVE-2025-1107

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-07 13:38:40

Laatst bijgewerkt 2025-02-12 20:51:40

Toegewezen door INCIBE

CVSS-score 9.9

Status PUBLISHED

Beschrijving

Unverified password change vulnerability in Janto, versions prior to r12. This could allow an unauthenticated attacker to change another user's password without knowing their current password. To exploit the vulnerability, the attacker must create a specific POST request and send it to the endpoint ‘/public/cgi/Gateway.php’.

← Alle CVE's bekijken Bekijk op cve.org ↗