CVE-2022-45782

8.8HIGH

An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account

发布于: 2/1/2023更新于: 3/27/2025
在NVD查看在MITRE查看

描述

An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account takeover.

AI分析AI驱动

受影响产品

dotcmsdotcms
dotcmsdotcms

参考资料