← All advisories

High severity7.5OSV Advisory· Published Dec 2, 2016· Updated Jun 17, 2026

CVE-2016-9479

CVE-2016-9479

Description

The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

B2evolution/B2evolutionOSV2 versions
6.0.0-alpha, 6.0.0-alpha.1, 6.1.2-alpha, …+ 1 more
- (no CPE)range: 6.0.0-alpha, 6.0.0-alpha.1, 6.1.2-alpha, …
- (no CPE)range: <6.7.9

Patches

Vulnerability mechanics

References

4

b2evolution.net/downloads/6-7-9-stablenvdPatchRelease NotesVendor Advisory
github.com/b2evolution/b2evolution/issues/33nvdIssue TrackingPatchThird Party Advisory
www.securityfocus.com/bid/95006nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1037393nvd

News mentions

0

No linked articles in our index yet.