CVE-2022-44938
Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.
Published: 2022-12-08 · CVSS: 9.8 · CVSS 3.1
Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7