CVE-2021-25957 — Account Takeover in "Dolibarr" via Password Reset Functionality
In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low privileged attacker can reset the password of any user in…
Published: 2021-08-17 · CVSS: 8.8 · CVSS 3.1
In “Dolibarr” application, v2.8.1 to v13.0.2 are vulnerable to account takeover via password reset functionality. A low privileged attacker can reset the password of any user in the application using the password reset link the user received through email when requested for a forgotten password.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7