Description
Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.
Critical · 9.8
CVE-2022-44938
EUVD-2022-47867GHSA-ghhq-5mmr-7wf5
Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.
Published Dec 8, 2022 · Updated Apr 23, 2025 · Assigned by mitre