CVE-2023-50172

A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to the silent creation of a recovery pass code for any user.
CVSS

No CVSS.

Configurations

No configuration.

Information

Published : 2024-01-10 16:15

Updated : 2024-01-12 18:15


NVD link : CVE-2023-50172

Mitre link : CVE-2023-50172


JSON object : View

Products Affected

No product.

CWE

No CWE.