Описание
An issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered information via submission to the forgotten-password endpoint.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:mobicint:mobicint:3.0:*:*:*:*:*:*:*
EPSS
Процентиль: 24%
0.00082
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-640
CWE-640
Связанные уязвимости
CVSS3: 5.3
github
почти 3 года назад
An issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered information via submission to the forgotten-password endpoint.
EPSS
Процентиль: 24%
0.00082
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-640
CWE-640