critical9.8
CVE-2024-48428
An issue in Olive VLE allows an attacker to obtain sensitive information via the reset password function.
Impact
An issue in Olive VLE allows an attacker to obtain sensitive information via the reset password function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Olivegroup | Olivevle | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://medium.com/%40powerful-/account-takeover-ato-via-the-reset-password-cve-2024-48428-84892d6211d6
- https://medium.com/h7w/full-account-takeover-via-password-reset-link-manipulation-840fb9402967
- https://www.linkedin.com/posts/said-al-ghammari-301972285_0day-bugbountytips-bugbountytip-activity-7227418100034412544-2ocu/
- https://www.olivevle.com/