| |
Vulnerability CVE-2024-28270
Published: 2024-04-08
| Description: |
An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request to /prod-api/user/resetPassword. |
References: |
https://github.com/bcvgh/web-flash-Broken-Access-Control-vulnerability/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
