CWE-640.

Open redirect in Oracle Corporation Oracle WebCenter Content

• Oracle Corporation Oracle WebCenter Content
• Cross-site scripting (XSS)
• Cross-site request forgery (CSRF)

Open redirect in Oracle Corporation Oracle WebCenter Content

• Oracle Corporation Oracle WebCenter Content
• Weak cryptography or TLS
• Cross-site request forgery (CSRF)

Open redirect in Oracle Corporation Oracle WebCenter Content

• Oracle Corporation Oracle WebCenter Content
• Cross-site scripting (XSS)
• Cross-site request forgery (CSRF)

FreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL

• freescout
• Authentication bypass
• CWE-178

Capgo - Insufficient Authentication in Email Change Endpoint

• Capgo
• CWE-640

H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery

• H3C NX15
• CWE-640

Essential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection

• wpdevteam Essential Addons for Elementor – Popular Elementor Templates & Widgets
• CWE-640

SureCart <= 4.2.3 - Unauthenticated Linked WordPress Account Takeover via Forged customer.updated Webhook

• SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments
• CWE-640

Missing Authentication

• Esri Portal for ArcGIS
• CWE-640

Weak Password Recovery Mechanism in Portal for ArcGIS

• Esri Portal for ArcGIS
• CWE-640

Coolify: Password reset link poisoning via X-Forwarded-Host header spoofing

• coollabsio coolify
• CWE-346
• CWE-640

FOSSBilling: Client password reset token reuse allows persistent account takeover

• FOSSBilling
• CWE-640

Kimai Password Reset Link Remains Valid After Password Change

• CWE-640

<2.58.0 · fixed in 2.58.0

Account Denial of Service in MCO

• MyComplianceOffice MCO
• Authentication bypass
• CWE-640

An issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to create an account via the register function in inc/auth.php.

• CWE-640

Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter

• pravel Invoice Generator
• CWE-640

SignUp & SignIn <= 1.0.0 - Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover

• pravel SignUp & SignIn
• CWE-640

Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover

• wpmudev Branda – White Label & Branding, Free Login Page Customizer
• CWE-640

Cap-go - Account Lockout via 2FA Misconfiguration on Unverified Email

• Cap-go capgo
• CWE-640

Open redirect in Oracle Corporation Oracle iSupplier Portal

• Oracle Corporation Oracle iSupplier Portal
• Cross-site request forgery (CSRF)
• Open redirect

PbootCMS Password MemberController.php retrieve password recovery

• PbootCMS
• CWE-640

LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it.

• CWE-640

<=7.0.0-beta1 · no fixed version yet

OUSL-GROUP-BrinaryBrains School Student Management System Forgot Password Endpoint Login.php ajax_forgot_password password recovery

• OUSL-GROUP-BrinaryBrains School Student Management System
• CWE-640

Simple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint

• eskapism Simple History – Track, Log, and Audit WordPress Changes
• CWE-640

QianFox FoxCMS Admin.php edit password recovery

• QianFox FoxCMS
• CWE-640

Tiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery

• Tiandy Easy7 Integrated Management Platform
• CWE-640

phpMyFAQ: Missing Password Reset Token Allows Account Takeover via Username/Email Enumeration

• Authentication bypass
• Information disclosure

<4.1.3 · fixed in 4.1.3

phpMyFAQ: Unauthenticated Password Reset Endpoint Allows User Enumeration and Forced Password Change Without Token Validation

• CWE-640

<4.1.3 · fixed in 4.1.3

An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain sensitive information via password reset functionality under /OutsideCmd

• CWE-640

Apostrophe has a Weak Password Recovery Mechanism for Forgotten Password and Improper Input Validation

• CWE-20
• CWE-640

<=4.29.0 · no fixed version yet

LatePoint <= 5.5.0 - Unauthenticated Account Takeover via Weak Password Recovery Mechanism

• LatePoint – Calendar Booking Plugin for Appointments and Events
• CWE-640

An issue was discovered in Gambio 4.9.2.0 (patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0).

• CWE-640

AzuraCast has Password Reset Poisoning via Untrusted X-Forwarded-Host Header that Leads to Account Takeover and 2FA Bypass

• CWE-640

<0.23.6 · fixed in 0.23.6

phpBB has Password Reset Link Poisoning via Host Header injection

• CWE-640

>=3.0.0, <3.3.16 || >=4.0.0-a1, <4.0.0-a2 · fixed in 3.3.16, 4.0.0-a2

D-Link M60 httpd password recovery

• D-Link M60
• CWE-640

blueprintUE: Password Reset Tokens Have No Expiry Window

• blueprintue-self-hosted-edition
• CWE-640

OpenAEV's Improper Password Reset Token Management Leads to Unauthenticated Account Takeover and Platform Compromise

• openaev
• CWE-640

Weak password recovery in Dell Pro 14 Essential PV14250 and others

• Dell Pro 14 Essential PV14250
• Dell Pro Micro / QCM1255
• CWE-640

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-m…

• CWE-640

Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms

• chamilo-lms
• CWE-640

Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery

• CWE-472
• CWE-640

<3.79.1 · fixed in 3.79.1

Membership Plugin – Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect

• stellarwp Membership Plugin – Restrict Content
• CWE-640

OPEXUS eComplaint and eCase insecure password reset

• OPEXUS eComplaint
• OPEXUS eCASE
• Information disclosure
• CWE-640

StudioCMS: IDOR — Admin-to-Owner Account Takeover via Password Reset Link Generation

• Broken access control
• CWE-640

<0.4.3 · fixed in 0.4.3

Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover.

• CWE-640

Cloudfoundry UAA has logic error in the token revocation endpoint implementation

• CWE-640
• CWE-693

>=77.30.0, <78.8.0 · fixed in 78.8.0

IRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links

• Open redirect
• CWE-640

>=4.4.0, <4.4.5 || >=4.5.0, <4.5.1 · fixed in 4.4.5, 4.5.1

Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse

• CWE-459
• CWE-640

<=0.24.6 · no fixed version yet

EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response

• evershop
• Information disclosure
• CWE-640

Statamic is vulnerable to account takeover via password reset link injection

• CWE-640

<5.73.10 || >=6.0.0-alpha.1, <6.7.1 · fixed in 5.73.10, 6.7.1

funadmin has Weak Password Recovery Mechanism for Forgotten Password

• CWE-640

<=7.1.0-rc4 · no fixed version yet

Intelbras VIP 3260 Z IA OutsideCmd password recovery

• Intelbras VIP 3260 Z IA
• CWE-640

vichan-devel vichan Password Change pages.php unverified password change

• vichan
• CWE-620
• CWE-640

Known affected by Account Takeover via Password Reset Token Leakage

• Information disclosure
• CWE-640

<1.6.3 · fixed in 1.6.3

AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

• AVideo Platform
• Cross-site request forgery (CSRF)
• CWE-640

AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

• AVideo Platform
• CWE-640

macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure

• macrozheng mall
• CWE-640

Information Disclosure in Birebirsoft's Sufirmam

• Birebirsoft Software and Technology Solutions Sufirmam
• CWE-305
• CWE-640

Improper Access Control in Birebirsoft's Sufirmam

• Birebirsoft Software and Technology Solutions Sufirmam
• Authentication bypass
• CWE-640

Sangfor Operation and Maintenance Security Management System edit_pwd_mall password recovery

• Sangfor Operation and Maintenance Security Management System
• CWE-640