Vulnerability Details CVE-2020-18124
A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily reset account passwords.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.5%
CVSS Severity
CVSS v3 Score 5.7
CVSS v2 Score 4.0
Products affected by CVE-2020-18124
-
cpe:2.3:a:indexhibit:indexhibit:2.1.5