CVE-2023-4448

Name of the Vulnerable Software and Affected Versions OpenRapid RapidCMS version 1.3.1

Description A critical issue affects the processing of the file admin/run-movepass.php, where the manipulation of the password and password2 arguments leads to weak password recovery. The attack can be initiated remotely.

Recommendations For OpenRapid RapidCMS version 1.3.1, apply a patch to fix this issue. As a temporary workaround, consider restricting access to the admin/run-movepass.php file until a patch is available. Avoid using the password and password2 arguments in the affected file until the issue is resolved.