CVE-2025-63314 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset the user password and e…
Critical CVSS: 10.0

CVE-2025-63314

A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset the user password and execute a full account takeover via a replay attack.
Vendor
Ddsn
Product
Cm3 Acora Cms
CWE
CWE-640
Yayın Tarihi
2026-01-12 17:15:52
Güncelleme
2026-01-22 22:02:45
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-640 Cm3 Acora Cms CRITICAL Ddsn 2026

Referanslar

http://acora.com http://ddsn.com https://github.com/padayali-JD/CVE-2025-63314