CVE-2017-5594
1 advisory.
Packagist/pagekit/pagekit CVE-2017-5594: high 7.5
Pagekit Weak Password Recovery Mechanism for Forgotten Password
Action: Upgrade pagekit/pagekit to 1.0.11 or later.
composer require pagekit/pagekit:1.0.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.11 | - |
Fixed versions
| 1.0.11 |
Sources
- osv: GHSA-rp89-32rp-qpq2
- https://nvd.nist.gov/vuln/detail/CVE-2017-5594
- https://github.com/pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268b
- https://github.com/pagekit/pagekit
- https://securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdf
- https://securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txt
- https://www.exploit-db.com/exploits/41143
- http://www.securityfocus.com/bid/95806
CVE-2017-5594 · published · modified · JSON