Threats tagged 'ghsa-45mh-8x4c-mfq7'

Dromara free-fs versions 2.0.1 through 2.3.1 have a vulnerability that allows unauthenticated attackers to brute-force six-digit password reset codes. This occurs via the PUT /apis/user/forget-password endpoint, where attackers can request a reset code for a known email and submit unlimited guesses within the code's 300-second validity period. Successful exploitation enables attackers to set a new password and take over user accounts.