VULNERABILITY INTELLIGENCE

CVE-2020-23360

CVSS score9.8 CRITICAL

EPSS probability1.22%

CISA KEVNot currently listed

Published2021-01-27

Last modified2026-06-17

Description

oscommerce v2.3.4.1 has a functional problem in user registration and password rechecking, where a non-identical password can bypass the checks in /catalog/admin/administrators.php and /catalog/password_reset.php