Security Advisory
CVE-2020-14423
5.3
MEDIUM
Vulnerability Description
Convos before 4.20 does not properly generate a random secret in Core/Settings.pm and Util.pm. This leads to a predictable CONVOS_LOCAL_SECRET value, affecting password resets and invitations.
Published Date
June 18, 2020
Official Source
NIST NVD Advisory