Skip to content
OpenAdvisories

Product · Capgo

Cap-go

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.6

    Cap-go < v12.128.2 Account Takeover via Unauthenticated Email Change Mechanism

    Cap-go prior to 12.128.2 contains an account takeover vulnerability in its email change mechanism that allows an attacker with temporary authenticated session access to change the registered email address without re-authentication such as password or MFA veri…