Vulnerabilities > Ushahidi

DATE CVE VULNERABILITY TITLE RISK
2020-02-04 CVE-2012-5618 Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ushahidi
Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens.
network
low complexity
ushahidi CWE-640
critical
9.8