Skip to content
5.3 Medium

CVE-2023-27464 A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix…

Description

A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forgot Password (Mendix 8 compatible) (All versions < V4.1.1), Mendix Forgot Password (Mendix 9 compatible) (All versions < V5.1.1). The affected versions of the module contain an observable response discrepancy issue that could allow an attacker to retrieve sensitive information.

Affected products and versions

Product Affected versions Fixed in
Mendix Forgot Password (Mendix 7 compatible) Versions not published
Mendix Forgot Password (Mendix 8 compatible) Versions not published
Mendix Forgot Password (Mendix 9 compatible) Versions not published
The 2 CVEs of Mendix Forgot Password (Mendix 7 compatible) →
Track this CVE