Skip to content
OpenAdvisories

Vendor

Uasoft

2 known vulnerabilities.

Products

Badaso 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2025-15398

    Uasoft badaso Token BadasoAuthController.php forgetPassword password recovery

    A security vulnerability has been detected in Uasoft badaso up to 2.9.7. Affected is the function forgetPassword of the file src/Controllers/BadasoAuthController.php of the component Token Handler. Such manipulation leads to weak password recovery. The attack…

    Uasoft Badaso