(CVE-2025-6216) Allegra密码恢复认证绕过漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-6216
• https://avd.aliyun.com/detail?id=AVD-2025-6216
• https://cve.imfht.com/detail/CVE-2025-6216?lang=en
• https://www.zerodayinitiative.com/advisories/ZDI-25-410/
• https://github.com/advisories/GHSA-7jmp-283p-h6xj
• https://www.sentinelone.com/vulnerability-database/cve-2025-6216/
• https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-4-and-release-7-5-2
• https://cve.imfht.com/poc_detail/cb42ade3fb7dacd4eb9bda363098810b4253af4d
• https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-6216.yaml

Related Vulnerabilities

• PoCCVE-2025-6216: Allegra - Authentication Bypass via Predictable Password Reset Token
• Allegra SiteConfigAction 认证绕过漏洞