CVE-2015-8707

Critical

Published: 26/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Password reset tokens in Magento CE before 1.9.2.2 and Magento EE before 1.14.2.2 are passed via a GET request and not canceled after use, allowing remote attackers to obtain user passwords.

Risk Assessment

Attackers can exploit this vulnerability to capture user passwords, potentially leading to unauthorized access to user accounts and sensitive data.

Recommendation

It is recommended to update Magento to the latest version to mitigate this vulnerability and to avoid passing password reset tokens in GET requests.

Original NVD description (English source)

Password reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via a GET request and not canceled after use, which allows remote attackers to obtain user passwords via a crafted external service with access to the referrer field.