Ushahidi

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Ushahidi records in CISA KEV

No Ushahidi vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Ushahidi · all components

TI-2012-04722 CVE-2012-5618 · GHSA-3q7m-4q8x-8gvg

MEDIUM 44

Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2020-02-04 Fixed in 2.6.1 CWE-640