Description
Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password.
Remediation
References
Related Vulnerabilities
Magento Improper Authorization Vulnerability (CVE-2021-21022)
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0272)
Drupal Core 8.9.x Security Bypass (8.9.0 - 8.9.5)
WordPress Plugin Accept Donations with PayPal Cross-Site Request Forgery (1.3.3)
OpenSSL Improperly Controlled Sequential Memory Allocation Vulnerability (CVE-2026-34183)