vulnwire
7.5high

CVE-2017-55941 exploit

Pagekit Weak Password Recovery Mechanism for Forgotten Password

Also known as GHSA-rp89-32rp-qpq2

Published 9 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
7.0%
percentile 94%
Public exploits
1
Exploit-DB

An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7_PGKT_01.

Exploit prediction (EPSS)

7.00% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

Exploits and detections

  • EDB-41143 PageKit 1.0.10 - Password Reset · webapps · 2017-01-21

CVSS scores

Assigned byVersionScoreVector
NVD3.17.5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD2.04.3AV:N/AC:M/Au:N/C:P/I:N/A:N
GitHub3.17.5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected packages

EcosystemPackageAffectedFixed in
packagistpagekit/pagekit
<1.0.11
1.0.11

Classification

Weakness
  • CWE-640 Weak Password Recovery Mechanism for Forgotten Password

References

  • securityfocus.com /bid/95806 · vdb-entry, x_refsource_BID, x_transferred
  • securelayer7.net /download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txt · x_refsource_MISC, x_transferred
  • github.com /pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268b · x_refsource_MISC, x_transferred
  • securelayer7.net /download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdf · x_refsource_MISC, x_transferred
  • exploit-db.com /exploits/41143/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2017-5594 · advisory
  • github.com /pagekit/pagekit · package
  • exploit-db.com /exploits/41143 · web

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.