A critical vulnerability in phpMyFAQ prior to 4.1.3 allows unauthenticated attackers to reset passwords, leading to potential account takeover.

This is a weak password recovery mechanism (CWE-640) that permits an unauthenticated attacker to manipulate the password update process. The vulnerability resides in the user password update endpoint, allowing attackers to change passwords without proper authorization.

The CVSS score of 8.2 reflects the high risk of unauthorized account takeover, which can lead to significant data compromise. In an environment where phpMyFAQ holds sensitive documentation or internal data, this vulnerability could result in unauthorized information disclosure and loss of user trust.

Immediate Action: Update phpMyFAQ to version 4.1.3 or later immediately to resolve the password reset flaw.

Proactive Monitoring: Monitor authentication logs for an unusual spike in password reset requests or suspicious account modification activity.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules designed to detect and block abnormal traffic patterns directed at the password recovery endpoints.

Public Exploit Available: No (exploit_available: false)

This vulnerability is highly dangerous due to its unauthenticated nature and the ease of account takeover. Organizations running phpMyFAQ should prioritize the update to version 4.1.3 to close this critical security gap.