Lucene search

K

IcscertCVELIST:CVE-2023-35134

HistoryJul 19, 2023 - 9:43 p.m.

CVE-2023-35134 Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password

2023-07-1921:43:20

CWE-640

icscert

raw.githubusercontent.com

3

weintek

weincloud

password recovery

jwt token

security vulnerability

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.9%

Weintek Weincloud v0.13.6

could allow an attacker to reset a password with the corresponding account’s JWT token only.

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.9%

Related for CVELIST:CVE-2023-35134

prion1 cve1 ics1