mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-24 20:04:01 +02:00
1.1 KiB
1.1 KiB
CVE-2020-1772
Description
It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Token(s), generated by users which already requested new passwords. This issue affects: ((OTRS)) Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15 and prior versions.
POC
Reference
Github
No PoCs found on GitHub currently.