CVE-2015-8033

MEDIUM EPSS 52.3%
Published Aug 14, 20205y ago · Modified Jun 17, 20262w ago
5.3 CVSS 3.1
Medium
Find Similar
Published Aug 14, 2020 5y ago
Last Modified Jun 17, 2026 2w ago

Description

In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account.

CVSS Details

Base Score
5.3
Exploitability
3.9
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
52.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-521

Affected Products 1

VendorProductVersionRange
textpatterntextpattern4.5.7any

References 2

  • github.com https://github.com/textpattern/textpattern/blob/f94c3fb9916ee0c7fa4a52025fa4e8c3273e355b/HISTORY.txt
    Release NotesThird Party Advisory
  • github.com https://github.com/textpattern/textpattern/commit/1c09094187b9aeb18f09697bc7d1db12d078ae10
    PatchThird Party Advisory

Remediation

  • github.com https://github.com/textpattern/textpattern/commit/1c09094187b9aeb18f09697bc7d1db12d078ae10
    PatchThird Party Advisory