Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 08:32:57 +0000 CVE-2021-25961 — SuiteCRM - Account Takeover in Password Reset Functionality https://cve.radiocsirt.org/vuln/cve-2021-25961 <p><strong>Affected:</strong> salesagility SuiteCRM</p> <p>In “SuiteCRM” application, v7.1.7 through v7.10.31 and v7.11-beta through v7.11.20 fail to properly invalidate password reset links that is associated with a deleted user id, which makes it possible for account takeover of any newly created user with the same user id.</p> <p><strong>Affected:</strong> salesagility SuiteCRM</p> <p>In “SuiteCRM” application, v7.1.7 through v7.10.31 and v7.11-beta through v7.11.20 fail to properly invalidate password reset links that is associated with a deleted user id, which makes it possible for account takeover of any newly created user with the same user id.</p> https://cve.radiocsirt.org/vuln/cve-2021-25961