Unrated
Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.
CVE-2022-30028
First seen on SecPulse
References
- advisory github.com
- advisory nvd.nist.gov
- web dradisframework.com