strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2019-11-07 22:15
Updated : 2024-11-21 04:33
NVD link : CVE-2019-18818
Mitre link : CVE-2019-18818
CVE.ORG link : CVE-2019-18818
JSON object : View
Products Affected
strapi
- strapi
CWE
CWE-640
Weak Password Recovery Mechanism for Forgotten Password