Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms
Résumé
Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, the default password reset mechanism generates tokens using sha1($email) with no random component, no expiration, and no rate limiting. An attacker who knows a user's email can compute the reset token and change the victim's password without authentication. This vulnerability is fixed in 1.11.38 and 2.0.0-RC.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com