CVE-2023-26984

2023-03-2900:00:00

mitre

www.cve.org

password reset

peppermint v0.2.4

unauthorized access

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request.

References

github.com/bypazs/CVE-2023-26984

github.com/Peppermint-Lab/peppermint/tree/master

peppermint.sh/