Lucene search

MitreCVE-2023-26984

HistoryMar 29, 2023 - 6:15 p.m.

CVE-2023-26984

2023-03-2918:15:07

CWE-639

mitre

web.nvd.nist.gov

cve-2023-26984

peppermint

password reset

security issue

nvd

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request.

Affected configurations

Nvd

Node

peppermintpeppermintMatch0.2.4

VendorProductVersionCPE
peppermintpeppermint0.2.4cpe:2.3:a:peppermint:peppermint:0.2.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
peppermint	peppermint	0.2.4	cpe:2.3:a:peppermint:peppermint:0.2.4:::::::*

References

github.com/bypazs/CVE-2023-26984

github.com/Peppermint-Lab/peppermint/tree/master

peppermint.sh/

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Related for CVE-2023-26984