CVE-2024-48428 - An issue in Olive VLE allows an attacker to obtain sensitive information via the reset password function

CRITICAL

An issue in Olive VLE allows an attacker to obtain sensitive information via the reset password function

Published Oct 25, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.77%

An issue in Olive VLE allows an attacker to obtain sensitive information via the reset password function.

No remediation recorded yet.

Weaknesses (1)

CWE-640

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-43012		Advisory
https://medium.com/%40powerful-/account-takeover-ato-via-the-reset-password-cve-2024-48428-84892d6211d6		ExploitThird Party Advisory
https://medium.com/h7w/full-account-takeover-via-password-reset-link-manipulation-840fb9402967		Third Party Advisory
https://www.linkedin.com/posts/said-al-ghammari-301972285_0day-bugbountytips-bugbountytip-activity-7227418100034412544-2ocu/		Third Party Advisory
https://www.olivevle.com/		Product