High · published November 29, 2025
🚨 A sneaky password reset flaw can lead to account takeover! In versions 5.0 to 5.7 of OrangeHRM, an attacker can change the username in the password reset process, turning the tables with just a few clicks. ⚡ Think of it like a hotel's room key system that lets a guest rewrite their key for any room without verifying their identity. If someone gets a hold of a key card, they could waltz right into any room they fancy, even the penthouse! With this vulnerability, an attacker can easily set a new password for any user, including those with privileged access. This means they could bypass security checks to access sensitive HR information, change passwords, or even lock legitimate users out of their accounts! The potential for chaos is absolutely devastating.
Think of it like a hotel's room key system that lets a guest rewrite their key for any room without verifying their identity. If someone gets a hold of a key card, they could waltz right into any room they fancy, even the penthouse! This flaw allows an attacker to alter the username parameter in the final password reset request, as the system does not verify that it matches the originally requested account. This results in the attacker being able to take over any account they target after obtaining a valid reset link.
With this vulnerability, an attacker can easily set a new password for any user, including those with privileged access. This means they could bypass security checks to access sensitive HR information, change passwords, or even lock legitimate users out of their accounts! The potential for chaos is absolutely devastating. To protect yourself, upgrade to version 5.8 of OrangeHRM immediately to close this vulnerability. Additionally, review your password reset procedures to include strict validations, ensuring that usernames are verified against the account for which the request was initiated. You've got this! With these steps, you'll secure your OrangeHRM system and protect your users in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| orangehrm/orangehrm | ≥ 5.0, < 5.8 | 5.8 |