CVE-2022-26313
EUVD-2022-3087408.03.2022, 12:15
A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1). In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mendix | forgot_password | 3.3.0 ≤ 𝑥 < 3.5.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration