2021-11-30 19:38:32
mitre
PUBLISHED
An issue was discovered in Concrete CMS before 8.5.7. The Dashboard allows a users password to be changed without a prompt for the current password.