https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:56:32 +0000 https://cve.radiocsirt.org/vuln/cve-2026-33707 <p><strong>Affected:</strong> chamilo-lms</p> <p>Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, the default password reset mechanism generates tokens using sha1($email) with no random component, no expiration, and no rate limiting. An attacker who knows a user&#39;s email can compute the reset token and change the victim&#39;s password without authentication. This vulnerability is fixed in 1.11.38 and 2.0.0-RC.3.</p> <p><strong>Affected:</strong> chamilo-lms</p> <p>Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, the default password reset mechanism generates tokens using sha1($email) with no random component, no expiration, and no rate limiting. An attacker who knows a user&#39;s email can compute the reset token and change the victim&#39;s password without authentication. This vulnerability is fixed in 1.11.38 and 2.0.0-RC.3.</p> https://cve.radiocsirt.org/vuln/cve-2026-33707