CVE-2020-28642
9.8CRITICALIn InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
게시됨: 11/16/2020업데이트됨: 11/21/2024
설명
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
AI 분석AI 기반
영향받는 제품
infinitewpinfinitewp
참조
- https://www.whitehack.de/advisories/HWADV2020-001.txtThird Party Advisory
- https://www.whitehack.de/advisories/HWADV2020-001.txtThird Party Advisory