| Package | Affected versions | Patched versions |
|---|---|---|
| efront | = 5.2.17= 5.2.21 |
A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password reset 1-time token. An attacker can visit the password reset supplying the password reset token to reset the password of an account of their choice.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free