Security Advisory

CVE-2021-25961

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-09-29 13:50:10

Last updated 2024-09-17 02:07:00

Assigner Mend

CVSS score 8.0

State PUBLISHED

Description

In “SuiteCRM” application, v7.1.7 through v7.10.31 and v7.11-beta through v7.11.20 fail to properly invalidate password reset links that is associated with a deleted user id, which makes it possible for account takeover of any newly created user with the same user id.

← Browse all CVEs View on cve.org ↗