Em resumo
- CVE-2026-45701 é uma vulnerabilidade MÉDIO (CVSS 6.9) que afeta sulu/sulu.
- Chance de exploração nos próximos 30 dias (EPSS): 0.23%, maior que 14.2% das vulnerabilidades.
- Correção: atualize para 3.0.6, 2.6.23 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| sulu/sulu Packagist | ≥ 3.0.0-alpha1, < 3.0.6< 2.6.23
| 3.0.62.6.23
|
Description
Impact
The password reset tokenand API key generation uses a weak cryptographical hash algorithm.
Patches
Fixed in 2.6.23 and 3.0.6 version.
Workarounds
Patch the related User.php and ResettingController.php file in the SecurityBundle.
NVD description
Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6, the password reset tokenand API key generation uses a weak cryptographical hash algorithm. This issue has been patched in versions 2.6.23 and 3.0.6.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free