exploitDog

CVE-2024-2463

Опубликовано: 21 мар. 2024

Источник: nvd

CVSS3: 8

EPSS Низкий

Описание

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1.

Ссылки

https://cdex.cloud/
Product
https://cert.pl/en/posts/2024/03/CVE-2024-2463/
Third Party Advisory
https://cert.pl/posts/2024/03/CVE-2024-2463/
Third Party Advisory
https://cdex.cloud/
Product
https://cert.pl/en/posts/2024/03/CVE-2024-2463/
Third Party Advisory
https://cert.pl/posts/2024/03/CVE-2024-2463/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cdex:cdex:*:*:*:*:*:*:*:*

Версия до 5.71 (включая)

EPSS

Процентиль: 44%

0.00212

Низкий

8 High

CVSS3

Дефекты

CWE-640

Связанные уязвимости

GHSA-5444-vc88-hfjh

CVSS3: 8

github

почти 2 года назад

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1.

EPSS

Процентиль: 44%

0.00212

Низкий

8 High

CVSS3

Дефекты

CWE-640