Fabian Funder

BioStar 2 version 2.9.11.6 allows users to set a new password without providing the current password. Exploiting this flaw, in combination with other vulnerabilities, can lead to unauthorized account access and potential system compromise.

The issue is related to reflected cross-site scripting due to improper encoding of request parameters in the debug-mode error page.

The issue is related to reflected cross-site scripting due to improper encoding of route parameters in the debug-mode error page.

The issue is related to Cross-Site Request Forgery (CSRF) attacks, which can be executed due to the lack of countermeasures and the use of the HTTP method `GET` to introduce changes in the system.

The issue discloses the password hash of the currently authenticated user after submitting a valid TOTP.

The issue allows reuse of TOTP tokens multiple times within the validity period.