CVE-2024-51478

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

YesWiki is a wiki system written in PHP. Prior to 4.4.5, the use of a weak cryptographic algorithm and a hard-coded salt to hash the password reset key allows it to be recovered and used to reset the password of any account. This issue is fixed in 4.4.5.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-327

Affected software

No affected versions have been published.

Timeline

Published: Oct 31, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-514797.5Next.js is a React framework for building full-stack web applications. In affected versions if a Next.js application is performing authoriza CVE-2024-51487.5A flaw was found in the gnome-remote-desktop package. The gnome-remote-desktop system daemon performs inadequate validation of session agent CVE-2024-514807.0RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAG CVE-2024-514811.0Nix is a package manager for Linux and other Unix systems. On macOS, built-in builders (such as `builtin:fetchurl`, exposed to users with `i CVE-2024-514829.9ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulnerable to boolean-bas CVE-2024-514836.9changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is used to fetch files CVE-2024-514848.1Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly val CVE-2024-514858.1Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly val CVE-2024-514868.4Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache CVE-2024-514878.1Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly val CVE-2024-514885.4Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately v CVE-2024-514895.4Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately v