cbcvebase.

Dovestones Ad Self Password Reset vulnerabilities

1 known vulnerability affecting dovestones/ad_self_password_reset.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2015-8267P2CRITICALCVSS 10.0≤ 3.0.3.02015-12-24
CVE-2015-8267 [CRITICAL] CWE-264 CVE-2015-8267: The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dov The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username.
nvd
Dovestones Ad Self Password Reset vulnerabilities | cvebase