PT-2021-11590 · Unknown · Projectsend

Varandinawer · Published 2021-01-21 · Updated 2021-07-21 · CVE-2020-28874

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: ProjectSend versions prior to r1295

Description: The issue arises from incorrect business logic in the reset-password.php file, allowing remote attackers to reset a password. Specifically, errors are not properly considered, such as an invalid token parameter.

Recommendations: For versions prior to r1295, update to version r1295 or later to resolve the issue. As a temporary workaround, consider restricting access to the reset-password.php file until the update is applied.

Exploit

Fix

Improper Authentication

Improper Resource Release

Weakness Enumeration

CWE-287

CWE-404

Related Identifiers

CVE-2020-28874

Affected Products

Projectsend

References · 7

• 🔥 https://github.com/varandinawer/CVE-2020-28874 · Exploit
• https://github.com/projectsend/projectsend/commits/master · Patch
• https://github.com/projectsend/projectsend/commit/440204734e9a1687cb9887e1c887173d23c5a93e · Patch
• http://projectsend.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-28874 · Security Note
• https://osv.dev/vulnerability/CVE-2020-28874 · Vendor Advisory
• https://github.com/projectsend/projectsend/releases/tag/r1295 · Note