Wiki.js: Password Reset Vulnerability Bypasses Account Disabling

In versions 2.5.303 of Wiki.js a medium severity vulnerability CVE-2024-45298 was detected. This vulnerability allows attackers to bypass account disabling by requesting a password reset. To fix this issue, all users are advised to upgrade to version 2.5.304, as there are no known workarounds for this vulnerability. For more details, visit https://avd.aquasec.com/nvd/2024/cve-2024-45298.