← Back to CVE List

CVE-2020-28874

Published: 2021-01-26T18:15Z
Last Modified: 2024-11-21T05:23Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt