# CWE-620.

Every Advisory and CVE whose sources give the weakness CWE-620, newest first.

## Records, newest first

- [vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php](https://agentprime.io/advisories/CVE-2025-71457.md)
  `CVE-2025-71457` · CVE record: vtenext vtenext · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-620
- [phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set](https://agentprime.io/advisories/CVE-2026-119429.md)
  `CVE-2026-119429` · CVE record: phpMyAdmin phpMyAdmin · CVSS 5.3 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-620
- [OmniRoute 3.8.0 before 3.8.52 Unverified Password Change via /api/settings/require-login](https://agentprime.io/advisories/CVE-2026-118984.md)
  `CVE-2026-118984` · CVE record: cheaper-inference OmniRoute · CVSS 7.0 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-620
- [Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password](https://agentprime.io/advisories/CVE-2013-20008.md)
  `CVE-2013-20008` · CVE record: Linksys WAG200G · CVSS 7.0 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-620
- [ProjectSend 2.5.0 before 2.7.0 Unverified Password Change via /settings/password](https://agentprime.io/advisories/CVE-2026-112002.md)
  `CVE-2026-112002` · CVE record: ProjectSend ProjectSend · CVSS 7.6 High · Not analysed yet · Published 18 Oct 2026 · Tags: CWE-620
- [MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges](https://agentprime.io/advisories/CVE-2026-97380.md)
  `CVE-2026-97380` · CVE record: MariaDB server · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control, CWE-620
- [Gotify: Insufficiently Protected Password Change endpoint](https://agentprime.io/advisories/GHSA-3hcj-9m7p-wwm9.md)
  `GHSA-3hcj-9m7p-wwm9`, `CVE-2026-102603`, `GO-2026-6772` · Go `github.com/gotify/server/v2` and 1 more: affected `<=2.9.1`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-620
- [FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification](https://agentprime.io/advisories/CVE-2026-104106.md)
  `CVE-2026-104106` · CVE record: error311 FileRise · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass, CWE-620
- [Joplin Server password reset accepts tokens issued for unrelated purposes](https://agentprime.io/advisories/CVE-2026-105785.md)
  `CVE-2026-105785` · CVE record: laurent22 joplin · CVSS 4.8 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-620, CWE-640
- [microservices-platform through 6.0.0 Unverified Password Change via /users/password](https://agentprime.io/advisories/CVE-2026-92467.md)
  `CVE-2026-92467` · CVE record: zlt2000 microservices-platform · CVSS 8.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-620
- [pig before 4.1.0 Unverified Password Change via /register/password](https://agentprime.io/advisories/CVE-2026-91995.md)
  `CVE-2026-91995` · CVE record: pig-mesh pig · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-620
- [sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change](https://agentprime.io/advisories/CVE-2026-86260.md)
  `CVE-2026-86260` · CVE record: sfturing hosp_order · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: CWE-620, CWE-640
- [phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change](https://agentprime.io/advisories/CVE-2026-85591.md)
  `CVE-2026-85591` · CVE record: thorsten phpMyFAQ · CVSS 7.1 High · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-620
- [Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation](https://agentprime.io/advisories/GHSA-8cj9-r88m-8945.md)
  `GHSA-8cj9-r88m-8945`, `CVE-2026-73292`, `GO-2026-6370` · Go `github.com/semaphoreui/semaphore`: affected `<0.0.0-20260707190631-c59c3dc9035b`, fixed in `0.0.0-20260707190631-c59c3dc9035b` · CVSS 8.3 High · Not analysed yet · Published 3 Sept 2026 · Tags: Cross-site request forgery (CSRF), CWE-620
- [Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition](https://agentprime.io/advisories/CVE-2026-77644.md)
  `CVE-2026-77644` · CVE record: PTC Windchill Risk and Reliability Enterprise Edition (Formerly Relex) · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Authentication bypass, CWE-620
- [Laravel Backpack CRUD: MyAccountController allows changing the login email without a current-password check](https://agentprime.io/advisories/GHSA-9fw9-8c49-qch8.md)
  `GHSA-9fw9-8c49-qch8`, `CVE-2026-54176`, `PKSA-wb9h-r8p2-f7xj` · Packagist `backpack/crud`: affected `>=6.0.0, <6.8.14 || >=7.0.0, <7.0.38`, fixed in `6.8.14`, `7.0.38` · CVSS 6.5 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Authentication bypass, CWE-620
- [Laravel Backpack CRUD: Unverified password change in MyAccountController via mass assignment](https://agentprime.io/advisories/GHSA-xpv2-hrfc-hw62.md)
  `GHSA-xpv2-hrfc-hw62`, `CVE-2026-54175`, `PKSA-x88v-wcq5-j3kt` · Packagist `backpack/crud`: affected `<6.8.11 || >=7.0.0-alpha.1, <7.0.34`, fixed in `6.8.11`, `7.0.34` · CVSS 7.6 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-620
- [WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha](https://agentprime.io/advisories/CVE-2026-76633.md)
  `CVE-2026-76633` · CVE record: LabRedesCefetRJ WeGIA · CVSS 8.6 High · Not analysed yet · Published 20 Aug 2026 · Tags: Broken access control, CWE-620
- [Nexus Repository 3 - Unverified Onboarding State on change-admin-password Endpoint](https://agentprime.io/advisories/CVE-2026-17599.md)
  `CVE-2026-17599` · CVE record: Sonatype Nexus Repository 3 · CVSS 6.9 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: CWE-620
- [Single Sign On For TNG <= 2.0.0 - Unauthenticated Privilege Escalation via Unverified Password Change](https://agentprime.io/advisories/CVE-2026-15964.md)
  `CVE-2026-15964` · CVE record: britcoder Single Sign On For TNG · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Aug 2026 · Tags: CWE-620
- [Poweradmin: API user-update endpoint leads to a non-admin reset any user's password and take over the superuser account](https://agentprime.io/advisories/GHSA-h4hf-v6w5-897x.md)
  `GHSA-h4hf-v6w5-897x`, `PKSA-wfnt-jmc8-c3b3` · Packagist `poweradmin/poweradmin`: affected `>=4.0.0, <4.2.5 || >=4.3.0, <4.3.4`, fixed in `4.2.5`, `4.3.4` · CVSS 8.8 High · Not analysed yet · Published 24 Jul 2026 · Tags: Broken access control, CWE-620
- [Improper Authentication in Vimesoft's Enterprise Video Platform](https://agentprime.io/advisories/CVE-2026-12692.md)
  `CVE-2026-12692` · CVE record: Vimesoft Inc. Enterprise Video Platform · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-620
- [Capgo - Authentication Bypass in Password Change via Missing Current Password Validation](https://agentprime.io/advisories/CVE-2026-56305.md)
  `CVE-2026-56305` · CVE record: Capgo Capgo · CVSS 8.7 High · Not analysed yet · Published 10 Jul 2026 · Tags: CWE-620
- [Siemens CPCI85 Central Processing/Communication: A vulnerability has been identified in CPCI85 Central Processing/Communication (All…](https://agentprime.io/advisories/CVE-2026-54801.md)
  `CVE-2026-54801` · CVE record: Siemens CPCI85 Central Processing/Communication and 1 more · CVSS 8.6 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-620
- [OpenProject: Business Logic Error on OpenProject through PATCH request to /api/v3/users/me permits to bypass password requirements](https://agentprime.io/advisories/CVE-2026-44733.md)
  `CVE-2026-44733` · CVE record: opf openproject · CVSS 5.9 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-620
- [OpenAM Account Takeover via Unverified Password Change in OAuth2 Module](https://agentprime.io/advisories/GHSA-gf57-4mp6-m85x.md)
  `GHSA-gf57-4mp6-m85x`, `CVE-2026-46623` · Maven `org.openidentityplatform.openam:openam-auth-oauth2`: affected `<16.1.1`, fixed in `16.1.1` · CVSS 7.4 High · Not analysed yet · Published 26 Jun 2026 · Tags: Hard-coded credentials, CWE-620
- [KMW CCTV Security Cameras Unverified Password Change](https://agentprime.io/advisories/CVE-2026-5386.md)
  `CVE-2026-5386` · CVE record: KMW KM-IP521 and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2026 · Tags: CWE-620
- [Devolutions Server: Unverified password change in Devolutions Server allows an attacker to change a user's…](https://agentprime.io/advisories/CVE-2026-9249.md)
  `CVE-2026-9249` · CVE record: Devolutions Server · CVSS 3.1 Low · Not analysed yet · Published 22 May 2026 · Tags: CWE-620
- [Concrete CMS has a session-hardening bypass and allows password change without reauthorization](https://agentprime.io/advisories/GHSA-wmw3-3fv3-h54w.md)
  `GHSA-wmw3-3fv3-h54w`, `CVE-2026-8327`, `PKSA-5dbv-8tcv-hjg5` · Packagist `concrete5/concrete5`: affected `<9.5.1`, fixed in `9.5.1` · CVSS 5.3 Medium · Not analysed yet · Published 22 May 2026 · Tags: Privilege escalation, Broken access control, CWE-620
- [OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence](https://agentprime.io/advisories/GHSA-wgx6-g857-jjf7.md)
  `GHSA-wgx6-g857-jjf7`, `CVE-2026-42084`, `PYSEC-2026-2242` · RubyGems `openc3`: affected `<6.10.5 || >=7.0.0.pre.rc1, <7.0.0-rc3`, fixed in `6.10.5`, `7.0.0-rc3` · CVSS 8.1 High · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-620
- [blueprintUE: Authenticated Password Change Does Not Verify Current Password](https://agentprime.io/advisories/CVE-2026-40588.md)
  `CVE-2026-40588` · CVE record: blueprintue blueprintue-self-hosted-edition · CVSS 8.1 High · Not analysed yet · Published 21 Apr 2026 · Tags: CWE-620
- [Navicat for Oracle 12.1.15 Password Field Denial of Service](https://agentprime.io/advisories/CVE-2019-25653.md)
  `CVE-2019-25653` · CVE record: Navicat Navicat for Oracle · CVSS 6.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-620
- [An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.](https://agentprime.io/advisories/CVE-2026-30458.md)
  `CVE-2026-30458` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-620
- [Lantronix EDS3000PS Unverified Password Change](https://agentprime.io/advisories/CVE-2025-70082.md)
  `CVE-2025-70082` · CVE record: Lantronix EDS3000PS series · CVSS 5.1 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection, Authentication bypass, CWE-620
- [Lantronix EDS3000PS OS Command Injection](https://agentprime.io/advisories/CVE-2025-67041.md)
  `CVE-2025-67041` · CVE record: Lantronix EDS3000PS series · CVSS 8.6 High · Not analysed yet · Published 11 Mar 2026 · Tags: Command injection, Authentication bypass, CWE-620
- [SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change](https://agentprime.io/advisories/CVE-2026-27757.md)
  `CVE-2026-27757` · CVE record: Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS · CVSS 7.1 High · Not analysed yet · Published 27 Feb 2026 · Tags: CWE-620
- [EventSentry < 6.0.1.20 Web Reports Unverified Password Change](https://agentprime.io/advisories/CVE-2026-24443.md)
  `CVE-2026-24443` · CVE record: NETIKUS.NET ltd EventSentry · CVSS 8.6 High · Not analysed yet · Published 24 Feb 2026 · Tags: CWE-620
- [vichan-devel vichan Password Change pages.php unverified password change](https://agentprime.io/advisories/CVE-2026-2543.md)
  `CVE-2026-2543` · CVE record: vichan-devel vichan · CVSS 5.1 Medium · Not analysed yet · Published 16 Feb 2026 · Tags: CWE-620, CWE-640
- [Tenda W30E V2 Allows Password Changes Without Verifying Current Password](https://agentprime.io/advisories/CVE-2026-24440.md)
  `CVE-2026-24440` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 8.7 High · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-620
- [Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service](https://agentprime.io/advisories/CVE-2025-14751.md)
  `CVE-2025-14751` · CVE record: Weintek cMT3072XH and 3 more · CVSS 8.7 High · Not analysed yet · Published 22 Jan 2026 · Tags: CWE-620
- [MOVEit Transfer REST API does not require current password in order to initiate the password change process](https://agentprime.io/advisories/CVE-2025-11235.md)
  `CVE-2025-11235` · CVE record: Progress MOVEit Transfer · CVSS 3.7 Low · Not analysed yet · Published 6 Jan 2026 · Tags: CWE-620
- [IBM Aspera Orchestrator Unverified Password Change](https://agentprime.io/advisories/CVE-2025-13148.md)
  `CVE-2025-13148` · CVE record: IBM Aspera Orchestrator · CVSS 8.1 High · Not analysed yet · Published 11 Dec 2025 · Tags: CWE-620
- [Ibexa User Bundle is missing password change validation](https://agentprime.io/advisories/GHSA-x93p-w2ch-fg67.md)
  `GHSA-x93p-w2ch-fg67`, `CVE-2025-67719`, `PKSA-tp68-m26r-qqm9` · Packagist `ibexa/user`: affected `>=5.0.0-beta1, <5.0.4`, fixed in `5.0.4` · CVSS 8.5 High · Not analysed yet · Published 10 Dec 2025 · Tags: CWE-620
- [Fortinet FortiSOAR on-premise: An unverified password change vulnerability \[CWE-620\] vulnerability in Fortinet FortiSOAR…](https://agentprime.io/advisories/CVE-2025-59808.md)
  `CVE-2025-59808` · CVE record: Fortinet FortiSOAR on-premise and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-620
- [Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as bl…](https://agentprime.io/advisories/CVE-2025-63362.md)
  `CVE-2025-63362` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Dec 2025 · Tags: CWE-620
- [Flowise does not Prevent Bypass of Password Confirmation - Unverified Password Change](https://agentprime.io/advisories/GHSA-fjh6-8679-9pch.md)
  `GHSA-fjh6-8679-9pch`, `CVE-2025-71328` · npm `flowise-ui`: affected `<3.0.10`, fixed in `3.0.10` · CVSS 8.7 High · Not analysed yet · Published 14 Nov 2025 · Tags: Authentication bypass, CWE-620
- [Flowise doesn't Prevent Bypass of Password Confirmation through Unverified Email Change (credentials)](https://agentprime.io/advisories/GHSA-x39m-3393-3qp4.md)
  `GHSA-x39m-3393-3qp4`, `CVE-2025-71337` · npm `flowise-ui`: affected `<3.0.10`, fixed in `3.0.10` · CVSS 8.7 High · Not analysed yet · Published 14 Nov 2025 · Tags: Authentication bypass, CWE-620
- [A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of…](https://agentprime.io/advisories/CVE-2025-61132.md)
  `CVE-2025-61132` · CVE record · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2025 · Tags: CWE-620
- [Matrix Authentication Service account password can be changed using an authenticated session without supplying the current password](https://agentprime.io/advisories/CVE-2025-62425.md)
  `CVE-2025-62425` · CVE record: element-hq matrix-authentication-service · CVSS 8.3 High · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-620
- [FelixRiddle dev-jobs-handlebars 1.0 uses absolute password-reset (magic) links using the untrusted \`req.headers.host\` header and forces the \`http\://\` scheme.](https://agentprime.io/advisories/CVE-2025-61536.md)
  `CVE-2025-61536` · CVE record · CVSS 8.2 High · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-620
- [Aggie 2.6.1 has a Host Header injection vulnerability in the forgot password functionality, allowing an attacker to reset a user's password.](https://agentprime.io/advisories/CVE-2025-22381.md)
  `CVE-2025-22381` · CVE record · CVSS 8.2 High · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-620
- [Appy Pie Connect for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password](https://agentprime.io/advisories/CVE-2025-9286.md)
  `CVE-2025-9286` · CVE record: hancock11 Appy Pie Connect for WooCommerce · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Oct 2025 · Tags: CWE-620
- [Sophos AP6 Series Wireless Access Points: An authentication bypass vulnerability allows remote attackers to gain administrative…](https://agentprime.io/advisories/CVE-2025-10159.md)
  `CVE-2025-10159` · CVE record: Sophos AP6 Series Wireless Access Points · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-620
- [CWE-620: Unverified Password Change](https://agentprime.io/advisories/CVE-2025-46389.md)
  `CVE-2025-46389` · CVE record: Emby MediaBrowser · CVSS 6.5 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-620
- [Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover](https://agentprime.io/advisories/CVE-2025-4606.md)
  `CVE-2025-4606` · CVE record: uxper Sala - Startup & SaaS WordPress Theme · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jul 2025 · Tags: CWE-620
- [DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset](https://agentprime.io/advisories/CVE-2024-12827.md)
  `CVE-2024-12827` · CVE record: scriptsbundle DWT - Directory & Listing WordPress Theme · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jun 2025 · Tags: CWE-620
- [UTT 进取 750W Administrator Password setSysAdm formDefineManagement unverified password change](https://agentprime.io/advisories/CVE-2025-6097.md)
  `CVE-2025-6097` · CVE record: UTT 进取 750W · CVSS 6.9 Medium · Not analysed yet · Published 16 Jun 2025 · Tags: CWE-620, CWE-640
- [Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation](https://agentprime.io/advisories/CVE-2025-5482.md)
  `CVE-2025-5482` · CVE record: sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2025 · Tags: CWE-620
- [TYPO3 Unverified Password Change for Backend Users](https://agentprime.io/advisories/GHSA-3jrg-97f3-rqh9.md)
  `GHSA-3jrg-97f3-rqh9`, `CVE-2025-47938`, `PKSA-6d7x-2gs8-wr59`, `PKSA-vvct-4w61-g1fk` · Packagist `typo3/cms-core` and 1 more: affected `>=9.0.0, <9.5.51 || >=10.0.0, <10.4.50 || >=11.0.0, <11.5.44 || >=12.0.0, <12.4.31 || >=13.0.0, <13.4.12`, fixed in `9.5.51`, `10.4.50`, `11.5.44`, `12.4.31`, `13.4.12` · CVSS 3.8 Low · Not analysed yet · Published 20 May 2025 · Tags: CWE-620
- [Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover](https://agentprime.io/advisories/CVE-2025-4322.md)
  `CVE-2025-4322` · CVE record: StylemixThemes Motors - Car Dealer, Rental & Listing WordPress theme · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 20 May 2025 · Tags: CWE-620

Older: <https://agentprime.io/advisories/tag/cwe-620.md?cursor=WyIyMDI1LTA1LTIwVDA1OjMwOjQ4LjE0NzAwMFoiLCJDVkUtMjAyNS00MzIyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-620>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-620/>. Everything for agents: <https://agentprime.io/llms.txt>.