← All advisories

Critical severity9.8NVD Advisory· Published Feb 4, 2020· Updated Jun 16, 2026

CVE-2012-5618

CVE-2012-5618

Description

Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Ushahidi/Ushahidi
cpe:2.3:a:ushahidi:ushahidi:*:*:*:*:*:*:*:*
Range: <2.6.1
Ushahidi/Ushahidi_Webllm-fuzzy2 versions
<2.6.1+ 1 more
- (no CPE)range: <2.6.1
- (no CPE)range: before 2.6.1

Patches

Vulnerability mechanics

References

2

github.com/ushahidi/Ushahidi_Web/commit/e8c7ecd42818c331db8945d20f8b1865bc6d157envdPatchThird Party Advisory
www.openwall.com/lists/oss-security/2012/12/04/1nvdMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.