CVEvulnerability

CVE-2023-27464

5.3 MEDIUM Published 2023-04-11 Modified 2026-10-24 Official page ↗
Status
Modified
Published
2023-04-11
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-203, CWE-204

Description

A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forgot Password (Mendix 8 compatible) (All versions < V4.1.1), Mendix Forgot Password (Mendix 9 compatible) (All versions < V5.1.1). The affected versions of the module contain an observable response discrepancy issue that could allow an attacker to retrieve sensitive information.

Affected configurations

• mendix forgot password (< 3.7.1) • mendix forgot password (>= 4.0.0 < 4.1.1) • mendix forgot password (>= 5.0.0 < 5.1.1)

Related

Weakness · CWE (2)

  • CWE-203 Observable Discrepancy weakness
  • CWE-204 Observable Response Discrepancy weakness

References