CVE-2024-7659 | projectsend up to r1605 Password Reset Token includes/functions.php generate_random_string random values

A vulnerability, which was classified as problematic, was found in projectsend up to r1605. Affected is the function generate_random_string of the file includes/functions.php of the component Password Reset Token Handler. The manipulation leads to insufficiently random values.

This vulnerability is traded as CVE-2024-7659. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.