Description
Craft CMS before 2.6.2976 does not prevent modification of the URL in a forgot-password email message.
Remediation
References
Related Vulnerabilities
WordPress Plugin Buddy Share It Allusers FB YR Arbitrary File Upload (3.2.8)
WordPress Plugin Mapplic-Custom Interactive Map Server-Side Request Forgery (6.1)
Joomla CVE-2021-23127 Vulnerability (CVE-2021-23127)
phpMyAdmin Other Vulnerability (CVE-2005-3301)
Roundcube Cross-site Request Forgery (CSRF) Vulnerability (CVE-2016-4069)