CVE-2021-32648—October CMS Improper Authentication

漏洞名称

October CMS Improper Authentication

描述

In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2021-32648

相关 CWE

• CWE-287