CVE-2022-44938

CRITICAL CVSS: 9.8 Published: 2022-12-08 Modified: 2026-06-17

Description

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.

Affected Platforms

Seeddms Seeddms

Weakness Type

NVD-CWE-Other, CWE-330

References