Vulnerabilities > CVE-2019-10014 - Incorrect Authorization vulnerability in Dedecms 5.7
Attack vector
NETWORK Attack complexity
LOW Privileges required
SINGLE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |