CVE-2020-27408

OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker t...

Original description

The description as published by the source.

OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
report insinuator.net