Skip to content
Not rated

CVE-2022-26313 A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1)

Description

A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1). In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts.

Affected products and versions

Product Affected versions Fixed in
Mendix Forgot Password Appstore module Versions not published
The 3 CVEs of Mendix Forgot Password Appstore module →
Track this CVE