| Package | Affected versions | Patched versions |
|---|---|---|
| openmeetings | ≤ 3.1.0 |
The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset tokens, which makes it easier for remote attackers to reset arbitrary user passwords by leveraging knowledge of a user name and the current system time.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free