WEB Agentejo Cockpit Auth.php resetpassword function NoSQL injection (CVE-2020-35847)

Rule ID

1236530

Severity

Critical

Description

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.

Impact

Policy bypass

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A