CVE-2022-30028: Dradisframework Dradis

Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.

Affected products

• Dradisframework Dradis: before 4.3.0 (fixed in 4.3.0)

Published 2022-06-24. Last modified 2026-06-17.