A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to the silent creation of a recovery pass code for any user.
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2024-01-10 16:15
Updated : 2024-01-12 18:15
NVD link : CVE-2023-50172
Mitre link : CVE-2023-50172
JSON object : View
Products Affected
No product.
CWE
No CWE.
