CVE-2020-15181 — Admin account takeover in Alfresco Reset Password
The Alfresco Reset Password add-on before version 1.2.0 relies on untrusted inputs in a security decision. Intruders can get admin's access to the system using the vulnerability…
Published: 2020-09-18 · CVSS: 9.3 · CVSS 3.1
The Alfresco Reset Password add-on before version 1.2.0 relies on untrusted inputs in a security decision. Intruders can get admin's access to the system using the vulnerability in the project. Impacts all servers where this add-on is installed. The problem is fixed in version 1.2.0
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7