CVE-2023-26984: High severity peppermint vulnerability
Published Mar 29, 2023
·Updated
An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request.
Affected Software
1 affected component
Peppermint Peppermint=0.2.4
Event History
Mar 29, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-26984?
CVE-2023-26984 is an issue in the password reset function of Peppermint v0.2.4 that allows attackers to access the emails and passwords of the Tickets page via a crafted request.
2
What software versions are affected by CVE-2023-26984?
CVE-2023-26984 affects Peppermint v0.2.4.
3
What is the severity of CVE-2023-26984?
The severity of CVE-2023-26984 is high with a CVSS score of 8.1.
4
How can I fix CVE-2023-26984?
To fix CVE-2023-26984, upgrade to a version of Peppermint that is not affected by the vulnerability.
5
Where can I find more information about CVE-2023-26984?
You can find more information about CVE-2023-26984 on the GitHub repository of Peppermint and the official website of Peppermint.