CVE-2015-10071

CVE-2015-10071 describes a weak password recovery vulnerability in gitter-badger ezpublish-modern-legacy, specifically affecting the kernel/user/forgotpassword.php file. With a CVSS score of 7.5 (HIGH), this vulnerability allows for remote exploitation without user interaction, potentially leading to unauthorized access through compromised password recovery. While the attack complexity is high and exploitation is considered difficult, the potential impact on confidentiality is significant. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.