CVE-2021-36436

Name of the Vulnerable Software and Affected Versions Mobicint Backend for Credit Unions version 3

Description An issue in the software allows attackers to retrieve partial email addresses and user-entered information via submission to the "forgotten-password endpoint".

Recommendations For Mobicint Backend for Credit Unions version 3, consider restricting access to the forgotten-password endpoint until a fix is available. As a temporary workaround, avoid using the forgotten-password feature to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.