CVE-2023-53958
LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account takeover by intercepting and using stolen reset tokens.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-12-19 21:15:52
Güncelleme
2025-12-23 14:51:52
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-