Account Takeover Vulnerability in Gestsup Prior to 3.2.10

CVE-2021-31646

What is CVE-2021-31646?

The Gestsup application version before 3.2.10 contains a vulnerability in its password recovery process, specifically in the 'forgot_pwd.php' file. The implementation relies on a weak token generation method using the PHP uniqueid function, making it susceptible to brute force attacks. This security flaw potentially allows attackers to gain unauthorized access to user accounts by exploiting the inadequacies in the password recovery functionality.

References