{"id":"CVE-2020-28874","aliases":["EUVD-2020-21265","GHSA-g5ww-gvff-fp7p"],"status":"published","title":"reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password...","description":"reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter).","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02379,"percentile":0.84003,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-269","CWE-287","CWE-404"],"published":"2021-01-21T15:01:48Z","modified":"2026-11-08T02:45:06Z","exploits":[{"source":"pocgithub","id":"varandinawer/CVE-2020-28874","title":"varandinawer/CVE-2020-28874","date":"2021-01-21","url":"https://github.com/varandinawer/CVE-2020-28874"}],"products":[{"vendor":"projectsend","product":"projectsend"}],"references":[{"url":"https://github.com/projectsend/projectsend/commits/master","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/varandinawer/CVE-2020-28874","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://github.com/projectsend/projectsend/commit/440204734e9a1687cb9887e1c887173d23c5a93e","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/projectsend/projectsend/releases/tag/r1295","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28874"},{"url":"http://projectsend.com"},{"url":"https://github.com/advisories/GHSA-g5ww-gvff-fp7p"}],"sources":{"cve":[{"id":"CVE-2020-28874","description":"reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter).","status":"published","published":"2021-01-21T15:01:48Z","modified":"2026-07-09T00:12:01.122Z","updated_at":"2026-11-02T14:35:57.017407Z"}],"euvd":[{"id":"EUVD-2020-21265","description":"reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter).","status":"published","published":"2021-01-21T15:01:48Z","modified":"2026-07-09T00:12:01Z","updated_at":"2026-11-02T18:20:09.583461Z"}],"ghsa":[{"id":"GHSA-g5ww-gvff-fp7p","title":"reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password...","description":"reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter).","status":"published","published":"2022-05-24T17:40:13Z","modified":"2026-07-05T00:32:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-269","CWE-287"],"updated_at":"2026-11-02T15:09:14.897479Z"}],"nvd":[{"id":"CVE-2020-28874","description":"reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter).","status":"published","published":"2021-01-26T18:15:51.02Z","modified":"2026-07-09T01:16:44.05Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-287","CWE-404"],"updated_at":"2026-11-02T14:06:30.596418Z"}],"osv":[{"id":"CVE-2020-28874","description":"reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter).","status":"published","published":"2021-01-26T18:15:51.02Z","modified":"2026-11-08T02:45:06.557084842Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-08T02:57:30.447698Z"}]}}