https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 22:13:13 +0000 https://cve.radiocsirt.org/vuln/cve-2024-50672 <p><strong>Affected:</strong> adapt_authoring_tool</p> <p>A NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool &lt;= 0.11.3 allows unauthenticated attackers to reset user and administrator account passwords via the &#34;Reset password&#34; feature. The vulnerability occurs due to insufficient validation of user input, which is used as a query in Mongoose&#39;s find() function. This makes it possible for attackers to perform a full takeover of the administrator account. Attackers can then use the newly gained administrative privileges to upload a custom plugin to perform remote code execution (RCE) on the server hosting the web application.</p> <p><strong>Affected:</strong> adapt_authoring_tool</p> <p>A NoSQL injection vulnerability in Adapt Learning Adapt Authoring Tool &lt;= 0.11.3 allows unauthenticated attackers to reset user and administrator account passwords via the &#34;Reset password&#34; feature. The vulnerability occurs due to insufficient validation of user input, which is used as a query in Mongoose&#39;s find() function. This makes it possible for attackers to perform a full takeover of the administrator account. Attackers can then use the newly gained administrative privileges to upload a custom plugin to perform remote code execution (RCE) on the server hosting the web application.</p> https://cve.radiocsirt.org/vuln/cve-2024-50672