CVE-2021-25957

Packagist/dolibarr/dolibarr CVE-2021-25957: high 8.8

Weak Password Recovery Mechanism for Forgotten Password

Action: Upgrade dolibarr/dolibarr to 14.0.0 or later.

composer require dolibarr/dolibarr:14.0.0

Affected

Fixed versions

Sources

• osv: GHSA-c32w-3cqh-f6jx
• https://nvd.nist.gov/vuln/detail/CVE-2021-25957
• https://github.com/Dolibarr/dolibarr/commit/87f9530272925f0d651f59337a35661faeb6f377
• https://github.com/Dolibarr/dolibarr
• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25957

CVE-2021-25957 · published 2021-09-02T17:08:33Z · modified 2023-11-08T04:05:18.694149Z · JSON