oss-security - Please assign CVE to PageKit Remote Password Reset Vulnerability

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CALq7B36BC=Jfwb=sN0OMnEzvFQG6WT6syGBrneJEOpYq9sLmwg@mail.gmail.com>
Date: Sat, 21 Jan 2017 22:28:47 +0530
From: Sandeep Kamble <sandeepk.l337@...il.com>
To: oss-security@...ts.openwall.com
Subject: Please assign CVE to PageKit Remote Password Reset Vulnerability

Hi,

Please provide the CVE to following vulnerability.

Here you can find the vulnerability report:
https://securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdf

Download the Remote Password Exploit:
https://securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txt

Fix from the PageKit CMS:
https://github.com/pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268b


Thank you
SecureLayer7

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.