Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens

Description

References

• sulu/sulu security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-45701 · ADVISORY
• sulu/sulu · PACKAGE
• sulu/sulu release 2.6.23 · WEB
• sulu/sulu release 3.0.6 · WEB

Altre vulnerabilità di sulu/sulu

• CVE-2026-92692MEDIO 6.9Sulu is an open-source PHP content management system based on the Symfony framework. Prior to 2.6.25 and 3.0.8, the affected Sulu 2.6 and 3.…
• CVE-2026-82396MEDIO 5.4Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/Med…
• CVE-2026-82395MEDIO 5.3Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the media move endp…
• CVE-2026-82394MEDIO 5.3Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the preview-link en…
• GHSA-9m6v-8fxc-4r44BASSOSulu: Used API Keys may be available via Admin API