An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request.
References
| Link | Resource |
|---|---|
| https://github.com/bypazs/CVE-2023-26984 | Exploit Third Party Advisory |
| https://github.com/bypazs/CVE-2023-26984 | Exploit Third Party Advisory |
| https://github.com/Peppermint-Lab/peppermint/tree/master | Product |
| https://github.com/Peppermint-Lab/peppermint/tree/master | Product |
| https://peppermint.sh/ | Product |
| https://peppermint.sh/ | Product |
Configurations
History
18 Feb 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/bypazs/CVE-2023-26984 - Exploit, Third Party Advisory | |
| References | () https://github.com/Peppermint-Lab/peppermint/tree/master - Product | |
| References | () https://peppermint.sh/ - Product |
05 Apr 2023, 14:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://github.com/Peppermint-Lab/peppermint/tree/master - Product | |
| References | (MISC) https://github.com/bypazs/CVE-2023-26984 - Exploit, Third Party Advisory | |
| References | (MISC) https://peppermint.sh/ - Product | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
| CPE | cpe:2.3:a:peppermint:peppermint:0.2.4:*:*:*:*:*:*:* | |
| CWE | CWE-639 | |
| First Time |
Peppermint
Peppermint peppermint |
Information
Published : 2023-03-29 18:15
Updated : 2025-02-18 17:15
NVD link : CVE-2023-26984
Mitre link : CVE-2023-26984
JSON object : View
Products Affected
peppermint
- peppermint
CWE
CWE-639
Authorization Bypass Through User-Controlled Key