CVE-2023-27464: Medium severity mendix vulnerability
A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forgot Password (Mendix 8 compatible) (All versions < V4.1.1), Mendix Forgot Password (Mendix 9 compatible) (All versions < V5.1.1). The affected versions of the module contain an observable response discrepancy issue that could allow an attacker to retrieve sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-27464.
What is the severity of CVE-2023-27464?
The severity of CVE-2023-27464 is medium with a severity value of 5.3.
What is the affected software for CVE-2023-27464?
The affected software for CVE-2023-27464 is Mendix Forgot Password (Mendix 7 compatible) versions < V3.7.1, Mendix Forgot Password (Mendix 8 compatible) versions < V4.1.1, Mendix Forgot Password (Mendix 9 compatible) versions < V5.1.1.
What is the CWE category for CVE-2023-27464?
The CWE category for CVE-2023-27464 is CWE-203 and CWE-204.
How can I fix the vulnerability in Mendix Forgot Password?
To fix the vulnerability in Mendix Forgot Password, update to version 3.7.1 or higher for Mendix 7 compatible, version 4.1.1 or higher for Mendix 8 compatible, or version 5.1.1 or higher for Mendix 9 compatible.