Description
Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limiting, allowing brute force attacks to guess valid reset tokens and compromise user accounts.
Affected products
creativeitem: academy lms
References1
- suryadina.com/academy-lms-reset-bruteforce-5q8w2e7t9y/ ExploitMitigationThird Party Advisory
Metrics
- CVSS 3.1
-
6.4
MEDIUM
Score source: CNA
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L - EPSS — exploit probability
- 0% percentile: 13 · as of 9 November 2026
- CWE
- CWE-640
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.