Vulnerability — CVE-2023-50172

CVE-2023-50172

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-50172
Description:: A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to the silent creation of a recovery pass code for any user.
Last updated date:: 01/18/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 01/18/2024
Reference url to background: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1897