7.3Yüksek
CVE-2026-109314Grav Login Plugin 1.2.0 before 3.9.9 Password Reset Token Disclosure via Reset Page
Açıklama
Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route. When a victim opens an emailed reset link, the publisher-controlled page rendered by Login::getPage() exposes the username and bearer token, enabling takeover of more privileged accounts.
Zayıflık türü (CWE):
CWE-200
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| getgrav | grav-plugin-login | 1.2.0 – < 3.9.9, fixed 3.9.9 |
Kaynaklar ve yamalar
- GitHub Security Advisory (GHSA-277m-9x28-gjq2) vendor-advisorythird-party-advisory
- VulnCheck Advisory: Grav Login Plugin 1.2.0 before 3.9.9 Password Reset Token Disclosure via Reset Page third-party-advisory