Password Reset Poisoning Vulnerability in GouguCMS by GouguOpen
CVE-2023-46393

7.5HIGH

Key Information:

Vendor: Gougucms
Status: Gougucms
Vendor: CVE Published:; 27 October 2023

What is CVE-2023-46393?

GouguCMS version 4.08.18 is susceptible to a password reset poisoning vulnerability. This flaw enables malicious actors to exploit the system by sending specially crafted packets, which can result in arbitrary password resets for users. Organizations using this version of GouguCMS must take immediate steps to mitigate this threat and secure user accounts against unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://gitee.com/gouguopen/gougucms/issues/I88TKH

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 27, 2023
Vulnerability Reserved
Oct 23, 2023

JSON

Gougucms

What is CVE-2023-46393?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.