CVE-2025-66391: CVE-2025-66391: güvenlik açığı

Açıklama (NVD)

In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the system will send a one-time password to an attacker-controlled email address when the attacker attempts to reset the password of a user account.

Özet bilgiler

CVSS v3.1

8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,38 (yüzdelik 33)

CWE

CWE-284

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• citrix.cloud.com
• github.com
• github.com
• CWE-284