7.3Hoch
CVE-2026-109314Grav Login Plugin 1.2.0 before 3.9.9 Password Reset Token Disclosure via Reset Page
Beschreibung
Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route. When a victim opens an emailed reset link, the publisher-controlled page rendered by Login::getPage() exposes the username and bearer token, enabling takeover of more privileged accounts.
Schwachstellentyp (CWE):
CWE-200
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| getgrav | grav-plugin-login | 1.2.0 – < 3.9.9, fixed 3.9.9 |
Referenzen und Patches
- GitHub Security Advisory (GHSA-277m-9x28-gjq2) vendor-advisorythird-party-advisory
- VulnCheck Advisory: Grav Login Plugin 1.2.0 before 3.9.9 Password Reset Token Disclosure via Reset Page third-party-advisory