CVE-2026-93340

Katalog CVE

CVSS 6.8 · Medium EPSS 0,53%

Kerentanan Weak Password Recovery Mechanism for Forgotten Password. Skor CVSS 3.1 6.8 (Medium) menurut vulncheck.com.

Deskripsi (NVD)

Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote attackers to obtain valid password reset tokens for any account by exploiting the client-supplied origin parameter in the forgot_password endpoint without server-side validation. Attackers can send a crafted request specifying an attacker-controlled origin, causing the victim to receive a poisoned reset link that discloses the session token to the attacker, enabling full account takeover including administrator accounts.

Rincian

Terbit di NVD

21 September 2026

Terakhir diubah

23 September 2026

Status NVD

Deferred

CVSS 3.1

6.8 (Medium), sumber vulncheck.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-640: Weak Password Recovery Mechanism for Forgotten Password

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,1% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/GladysAssistant/Gladys/releases/tag/v5.1.0
• https://gladysassistant.com/blog/gladys-5-1-integration-widgets-and-scenes/
• https://www.vulncheck.com/advisories/gladys-assistant-password-reset-link-poisoning-via-forgot-password-endpoi...