CVE-2016-9479

The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request

published December 2, 2016

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01838 · 78.7th percentile
Published
2016-12-02T16:00Z
EPSS history
Timeline
  • 02 DEC 16:00Z
    The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request
    cvelistv5