CVE-2019-18818observed exploitation

CVE-2019-18818

Published · Updated

Follow this CVE+ Monitor strapi

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

82Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 97%
from disclosure to weapon661 days
Published on NVDNov 7
1st PoC+661d
metasploit+825d
VulnCheck+1230d
strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.