Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens

Description

References

• sulu/sulu security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-45701 · ADVISORY
• sulu/sulu · PACKAGE
• sulu/sulu release 2.6.23 · WEB
• sulu/sulu release 3.0.6 · WEB

Autres vulnérabilités de sulu/sulu

• CVE-2026-92692MOYENNE 6.9Sulu is an open-source PHP content management system based on the Symfony framework. Prior to 2.6.25 and 3.0.8, the affected Sulu 2.6 and 3.…
• CVE-2026-82396MOYENNE 5.4Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/Med…
• CVE-2026-82395MOYENNE 5.3Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the media move endp…
• CVE-2026-82394MOYENNE 5.3Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the preview-link en…
• GHSA-9m6v-8fxc-4r44FAIBLESulu: Used API Keys may be available via Admin API