CVE-2024-7659

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in projectsend up to r1605. Affected is the function generate_random_string of the file includes/functions.php of the component Password Reset Token Handler. The manipulation leads to insufficiently random values. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version r1720 is able to address this issue. The name of the patch is aa27eb97edc2ff2b203f97e6675d7b5ba0a22a17. It is recommended to upgrade the affected component.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-330

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-76606.1A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unCVE-2024-76618.8A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been classified as problematic. This affects thCVE-2024-76626.5A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. This vulnerabilitCVE-2024-76635.3A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as critical. This issue affects someCVE-2024-76644.3A vulnerability classified as critical has been found in SourceCodester Car Driving School Management System 1.0. Affected is an unknown funCVE-2024-76654.3A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Affected by this vulnerability CVE-2024-76665.3A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System 1.0. Affected by thCVE-2024-76675.3A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0. This affects the fuCVE-2024-76685.3A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This vulnerability affCVE-2024-76695.3A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical. This issue affects the funcCVE-2024-76707.8A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor caCVE-2024-76717.8A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A m
CVE-2024-7659: High severity, CVSS 7.5 | Vulnix