Description

Forgotten password reset functionality for local accounts can be used to bypass local authentication checks.

Remediation

References

CVE-2021-27654

Related Vulnerabilities

TYPO3 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-55924)

Joomla Improper Input Validation Vulnerability (CVE-2006-1957)

Drupal Core 8.x.x Remote Code Execution (8.0.0 - 8.4.8)

phpMyAdmin Other Vulnerability (CVE-2005-3665)

ZenCart Improper Input Validation Vulnerability (CVE-2009-4321)

Severity

High

Classification

CVE-2021-27654 CWE-640 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities