Threats tagged 'ghsa-g4xx-c33q-625w'

Omnispace Agora Project versions before 26.10.0 have a vulnerability in their password generation mechanism. The function Txt::defaultPassword() uses PHP's uniqid() function, which generates predictable values based on server time in microseconds. This allows attackers who can observe or approximate the account creation time to predict temporary or default passwords and potentially take over accounts before legitimate users log in.