PT-2023-20888 · Unknown · Peppermint
CVSS v3.1
8.1
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Peppermint version 0.2.4
Description
The issue concerns the password reset function, allowing attackers to access emails and passwords of the Tickets page through a crafted request.
Recommendations
For Peppermint version 0.2.4, consider disabling the password reset function temporarily until a patch is available to prevent exploitation.
Exploit
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Peppermint