CVE-2026-28213 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

EverShop is a TypeScript-first eCommerce platform. Versions prior to 2.1.1 have a vulnerability in the "Forgot Password" functionality. When specifying a target…
Critical CVSS: 9.8

CVE-2026-28213

EverShop is a TypeScript-first eCommerce platform. Versions prior to 2.1.1 have a vulnerability in the "Forgot Password" functionality. When specifying a target email address, the API response returns the password reset token. This allows an attacker to take over the associated account. Version 2.1.1 fixes the issue.
Vendor
Evershop
Product
Evershop
CWE
CWE-200
Yayın Tarihi
2026-02-26 23:16:35
Güncelleme
2026-02-28 01:18:18
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-200 Evershop CRITICAL Evershop 2026

Referanslar

https://github.com/evershopcommerce/evershop/releases/tag/v2.1.1 https://github.com/evershopcommerce/evershop/security/advisories/GHSA-cg73-g723-39jw