| Package | Affected versions | Patched versions |
|---|---|---|
| eramba | = 2.19.3= 2.8.1 |
eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free