CVE-2020-15181

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.0400%

EPSS Percentile37.09th

PublishedSep 18, 2020

Last ModifiedNov 21, 2024

Vulnerability Description

The Alfresco Reset Password add-on before version 1.2.0 relies on untrusted inputs in a security decision. Intruders can get admin's access to the system using the vulnerability in the project. Impacts all servers where this add-on is installed. The problem is fixed in version 1.2.0

Affected Platforms (CPE)

📦

Alfresco

Reset Password

< 1.2.0

References & Advisories

🔗 https://github.com/FlexSolution/AlfrescoResetPassword/commit/5927b9651356c4cd952cb9b485292583d305b47c

🔗 https://github.com/FlexSolution/AlfrescoResetPassword/security/advisories/GHSA-xrc8-fjp4-h4fv