CVE-2022-22691
Umbraco Password Reset URL Poison
- State
- Published
- Severity
- 6.8 Medium
- Published
- Jan 18, 2022
- Updated
- Sep 16, 2024
- Reserved
- Jan 5, 2022
Description
The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbraco users when so that it points to the attackers server thereby disclosing the password reset token if/when the link is followed. A related vulnerability (CVE-2022-22690) could allow this flaw to become persistent so that all password reset URLs are affected persistently following a successful attack. See the AppCheck advisory for further information and associated caveats.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.8 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N | AppCheck |
Weaknesses
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password
Affected Products
| Product | Versions |
|---|---|
Umbraco CMSUmbraco |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.