A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forgot Password (Mendix 8 compatible) (All versions < V4.1.1), Mendix Forgot Password (Mendix 9 compatible) (All versions < V5.1.1). The affected versions of the module contain an observable response discrepancy issue that could allow an attacker to retrieve sensitive information.
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-699404.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
19 Apr 2023, 19:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://cert-portal.siemens.com/productcert/pdf/ssa-699404.pdf - Vendor Advisory | |
| CPE | cpe:2.3:a:mendix:forgot_password:*:*:*:*:*:*:*:* | |
| First Time |
Mendix forgot Password
Mendix |
|
| CWE | CWE-203 |
11 Apr 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-11 10:15
Updated : 2023-04-19 19:59
NVD link : CVE-2023-27464
Mitre link : CVE-2023-27464
JSON object : View
Products Affected
mendix
- forgot_password
CWE
CWE-203
Observable Discrepancy