CVE-2022-30935

An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any user through the use of a bad randomness function. This allows the attacker to get valid sessions for arbitrary users, and optionally reset their password. Tested and confirmed in a default installation of version 7.2.3. Earlier versions are affected, possibly earlier major versions as well.

• CWE-330
• CWE-330

• https://b2evolution.net/downloads/7-2-5-stablePatch, Vendor Advisory
• https://github.com/b2evolution/b2evolution/blob/master/inc/_core/_misc.funcs.php#L5955Patch, Third Party Advisory
• https://github.com/b2evolution/b2evolution/issues/114Issue Tracking, Third Party Advisory
• https://b2evolution.net/downloads/7-2-5-stablePatch, Vendor Advisory
• https://github.com/b2evolution/b2evolution/blob/master/inc/_core/_misc.funcs.php#L5955Patch, Third Party Advisory
• https://github.com/b2evolution/b2evolution/issues/114Issue Tracking, Third Party Advisory

Published

Sep 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30927A SQL injection vulnerability exists in Simple Task Scheduli…9.8
• CVE-2022-30929Mini-Tmall v1.0 is vulnerable to Insecure Permissions via to…8.8
• CVE-2022-3093This vulnerability allows physical attackers to execute arbi…6.4
• CVE-2022-30930Tourism Management System Version: V 3.2 is affected by: Cro…4.3
• CVE-2022-30931Employee Leaves Management System (ELMS) V 2.1 is vulnerable…6.5
• CVE-2022-30932Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-30937A vulnerability has been identified in EN100 Ethernet module…7.5
• CVE-2022-30938A vulnerability has been identified in EN100 Ethernet module…7.5
• CVE-2022-3094Sending a flood of dynamic DNS updates may cause `named` to …7.5
• CVE-2022-30943Browsing restriction bypass vulnerability in Bulletin of Cyb…4.3
• CVE-2022-30944Insufficiently protected credentials for Intel(R) AMT and In…5.5
• CVE-2022-30945Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and ear…8.5