Description
Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password.
Remediation
References
Related Vulnerabilities
MySQL CVE-2019-2815 Vulnerability (CVE-2019-2815)
Oracle Database Server CVE-2010-2407 Vulnerability (CVE-2010-2407)
Oracle Application Server CVE-2006-0273 Vulnerability (CVE-2006-0273)
WordPress Plugin Invoicing with InvoiceXpress for WooCommerce-Free Cross-Site Scripting (3.0.2)
WordPress Plugin Login With Ajax Cross-Site Request Forgery (3.0.4.1)