critical9.8
CVE-2016-5100
Froxlor guessable password reset token
Impact
Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | froxlor/froxlor | < 0.9.35 | 0.9.35 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Froxlor | Froxlor | through 0.9.34.2 |