medium5.9
CVE-2022-30028
Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.
Impact
Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dradisframework | Dradis | before 4.3.0 |