CVE-2021-4240

CVE-2021-4240 is a problematic vulnerability in phpservermon, specifically within the generatePasswordResetToken function of src/psm/Service/User.php, affecting phpservermonitor php_server_monitor. This flaw stems from the use of a predictable algorithm in the random number generator, which could allow an attacker to guess password reset tokens. Rated as MEDIUM severity with a CVSS score of 5.3, this vulnerability has a low attack complexity and requires no user interaction, potentially leading to a compromise of confidentiality. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there readily available Metasploit, Nuclei, or ExploitDB modules. Community discussion and media coverage for this CVE are minimal, aligning with typical patterns for the majority of reported vulnerabilities. A patch (3daa804d5f56c55b3ae13bfac368bb84ec632193) is available and recommended for remediation.