critical9.8
CVE-2019-10641
Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password.
Impact
Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Contao | Contao Cms | before 3.5.39 from 4.0.0 before 4.7.3 |