CVE-2023-46393

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.

Se descubrió que gougucms v4.08.18 contiene una vulnerabilidad de envenenamiento por restablecimiento de contraseña que permite a los atacantes restablecer arbitrariamente las contraseñas de los usuarios a través de un paquete manipulado.