CVE-2020-28597: Epignosishq Efront

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password reset 1-time token. An attacker can visit the password reset supplying the password reset token to reset the password of an account of their choice.

Affected products

• Epignosishq Efront: version 5.2.17 only; version 5.2.21 only

Published 2021-03-03. Last modified 2026-06-17.