Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-25961

In “SuiteCRM” application, v7.1.7 through v7.10.31 and v7.11-beta through v7.11.20 fail to properly invalidate password reset links that is associated with a deleted user id, which makes it possible for account takeover of any newly created user with the same user id.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.4%
CVSS Severity
CVSS v3 Score 8.0
CVSS v2 Score 6.0
Products affected by CVE-2021-25961


Contact Us

Shodan ® - All rights reserved