CVE-2021-32648 — Account Takeover in Octobercms
octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then ga…
Published: 2021-08-26 · CVSS: 8.2 · CVSS 3.1
octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7