medium5.3
CVE-2017-8385
Craft CMS before 2.6.2976 does not prevent modification of the URL in a forgot-password email message.
Impact
Craft CMS before 2.6.2976 does not prevent modification of the URL in a forgot-password email message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Craftcms | Craft Cms | through 2.6.2974 |