Detections
Analytics

SCA: security update for pagekit/pagekit (GHSA-rp89-32rp-qpq2)

high Tenable Cloud Security Plugin ID 433827

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to
 reset the registered user's password, when the debug toolbar is enabled. The password is successfully
 recovered using this exploit. The SecureLayer7 ID is SL7_PGKT_01. (CVE-2017-5594)

See Also

https://github.com/advisories/GHSA-rp89-32rp-qpq2

Plugin Details

Severity: High

ID: 433827

Version: Revision 1.3

Type: Local

Family: SCA Checks

Published: 8/19/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.12

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.4

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2017-5594

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.7

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/13/2022

Vulnerability Publication Date: 1/25/2017

Reference Information

CVE: CVE-2017-5594

BID: 95806

cwe: CWE-640