Skip to content
Not rated

CVE-2022-26314 A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1),…

Description

A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix Forgot Password Appstore module (Mendix 7 compatible) (All versions < V3.2.2). Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to efficiently brute force passwords in specific situations.

Affected products and versions

Product Affected versions Fixed in
Mendix Forgot Password Appstore module Versions not published
Mendix Forgot Password Appstore module (Mendix 7 compatible) Versions not published
The 3 CVEs of Mendix Forgot Password Appstore module →
Track this CVE