Contao Weak Password Recovery Mechanism for Forgotten Password Vulnerability - CVE-2019-10641 - Vulnerability Database

Contao Weak Password Recovery Mechanism for Forgotten Password Vulnerability - CVE-2019-10641

Critical
Reference: CVE-2019-10641
Title: Contao Weak Password Recovery Mechanism for Forgotten Password Vulnerability
Overview:

Contao before 3.5.39 and 4.x before 4.7.3 has a Weak Password Recovery Mechanism for a Forgotten Password.