CWE-640: Weak Password Recovery Mechanism for Forgotten Password
The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- payloadcms payloadPayload has Unvalidated Input in Password Recovery Endpoints9.1 Critical
- stellarwp membership plugin – restrict contentMembership Plugin – Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect4.3 Medium
- opexus ecase, ecomplaint, opexustech ecase ecomplaint +2 moreOPEXUS eComplaint and eCase insecure password reset9.2 Critical
- studiocmsStudioCMS: IDOR — Admin-to-Owner Account Takeover via Password Reset Link Generation6.8 Medium
- telekom account management portalIncorrect Access Control via activation token reuse on the password-reset endpoint allowing...9.4 Critical
- cloudfoundry foundation uaa, cloudfoundry cf-deployment, uaa-release +2 moreUAA User Token Revocation logic error6.5 Medium
- internet routing registry daemon project routing registry daemon, irrdnet irrd +1 moreIRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links8.1 High
- go-vikunja vikunjaVikunja Vulnerable to Account Takeover via Password Reset Token Reuse9.8 Critical
- evershopEverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response9.8 Critical
- statamic cms, statamic +1 moreStatamic is vulnerable to account takeover via password reset link injection9.3 Critical
- funadminfunadmin Member.php repass password recovery6.3 Medium
- intelbras vip 3260 z iaIntelbras VIP 3260 Z IA OutsideCmd password recovery9.2 Critical
- vichan-devel vichanvichan-devel vichan Password Change pages.php unverified password change5.1 Medium
- idno knownKnown affected by Account Takeover via Password Reset Token Leakage9.8 Critical
- avideo platform, wwbn avideo +1 moreAVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)8.5 High
- avideo platform, wwbn avideo +1 moreAVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)8.5 High
- macrozheng mallmacrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure9.3 Critical
- birebirsoft software and technology solutions sufirmamInformation Disclosure in Birebirsoft's Sufirmam10.0 Critical
- birebirsoft software and technology solutions sufirmamImproper Access Control in Birebirsoft's Sufirmam9.4 Critical
- sangfor operation and maintenance security management systemSangfor Operation and Maintenance Security Management System edit_pwd_mall password recovery6.9 Medium
- beehive forum forum, beehiveforum beehive forum +1 moreBeehive Forum - Account Takeover8.5 High
- ddsn cm3 acora cmsA static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7...10.0 Critical
- uasoft badasoUasoft badaso Token BadasoAuthController.php forgetPassword password recovery6.3 Medium
- smub easy digital downloads – ecommerce payments and subscriptions made easyEasy Digital Downloads <= 3.6.2 - Unvalidated Redirect in Password Reset Flow via edd_redirect4.3 Medium
- ltb-project ldap tool box self service passwordLDAP Tool Box Self Service Password 1.5.2 Account Takeover via HTTP Host Header8.6 High
- keepassxc keepassxc-browserKeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents...7.1 High
- shenzhen sixun software sixun shanghui group business management systemShenzhen Sixun Software Sixun Shanghui Group Business Management System UpdatePasswordBatch password recovery6.9 Medium
- emby, embysupport security +1 moreEmby Server allows attackers to gain administrative server access without preconditions9.3 Critical
- maxhub pivot client applicationMAXHUB Pivot Weak Password Recovery Mechanism for Forgotten Password8.7 High
- masacmsHost header poisoning allows account takeover via password reset email8.8 High
- orangehrmOrangeHRM is Vulnerable to Account Takeover Through Unvalidated Username in Password Reset Workflow8.7 High
- monnit imonnitAn issue was discovered in imonnit.com (2025-04-24) allowing malicious actors to gain escalated privileges via crafted password reset to take over arbitrary user accounts.9.8 Critical
- code-projects inventory management systemSourceCodester Inventory Management System resetPassword.php password recovery6.9 Medium
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 is vulnerable to password reset link manipulation6.8 Medium
- piwigoPiwigo is vulnerable to one-click account takeover by modifying the password-reset link8.1 High
shopware/corePackagistShopware 6's password recovery link does not expire after email change5.0 Medium- optimus software brokerage automation2FA Expiry Bypass in Optimus Software's Brokerage Automation8.1 High
- hundred plus eip plusHundred Plus｜EIP Plus - Weak Password Recovery Mechanism9.3 Critical
- zitadelZITADEL Vulnerable to Account Takeover via Malicious Forwarded Header Injection8.1 High
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 moreAutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password7.3 High
- creativeitem academy lmsCreativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on...6.4 Medium
- vmware nsxWeak password recovery vulnerability8.1 High
- wavlink wl-wn578w2, wl-wn578w2 firmware +1 moreWavlink WL-WN578W2 sysinit.html password recovery6.9 Medium
- daikin europe n.v security gatewayDaikin Europe N.V Security Gateway Weak Password Recovery Mechanism for Forgotten Password8.8 High
- hossein material dashboardWordPress Material Dashboard plugin <= 1.4.6 - Privilege Escalation Vulnerability9.8 Critical
- No product listedA vulnerability in the password reset workflow of the Touch Lebanon Mobile App 2.20.2 allows an...8.8 High
- mozilla firefox, firefox for ios +1 moreContent-Disposition headers incorrectly ignored for some MIME types6.1 Medium
- No product listedAn issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings...9.8 Critical
- jishenghua jsherpjshERP updatePwd password recovery5.3 Medium
- mercusys mw301rMercusys MW301R Web Interface password recovery5.1 Medium
- Show moreLoading…