Password reset tokens are generated using an insecure...
Critical severity
Unreviewed
Published
Aug 8, 2024
to the GitHub Advisory Database
•
Updated Aug 8, 2024
Description
Published by the National Vulnerability Database
Aug 7, 2024
Published to the GitHub Advisory Database
Aug 8, 2024
Last updated
Aug 8, 2024
Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password.
References