web-flash vulnerabilities
1 known vulnerability in web-flash from Enilu. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest first
- 8.1 High severity
web-flash: Weak Encoding for Password
An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request to /prod-api/user/resetPassword.