Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens

Description

References

• sulu/sulu security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-45701 · ADVISORY
• sulu/sulu · PACKAGE
• sulu/sulu release 2.6.23 · WEB
• sulu/sulu release 3.0.6 · WEB

sulu/sulu 的其他漏洞

• CVE-2026-92692中危 6.9Sulu is an open-source PHP content management system based on the Symfony framework. Prior to 2.6.25 and 3.0.8, the affected Sulu 2.6 and 3.…
• CVE-2026-82396中危 5.4Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, src/Sulu/Bundle/Med…
• CVE-2026-82395中危 5.3Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the media move endp…
• CVE-2026-82394中危 5.3Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.25 and 3.0.8, the preview-link en…
• GHSA-9m6v-8fxc-4r44低危Sulu: Used API Keys may be available via Admin API