Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-45701

Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6, the password reset tokenand API key generation uses a weak cryptographical hash algorithm. This issue has been patched in versions 2.6.23 and 3.0.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

sulu sulu

  • < 2.6.23affected
  • >= 3.0.0-alpha1, < 3.0.6affected

References