CVE-2023-34732

CVE-2023-34732 Abuso di funzione autenticata per il furto dell'account Descrizione Un attaccante può forzare la password di qualsiasi utente inclusi gli amministratori utilizzando il parametro userId nella funzionalità di cambio password e aggiornare la password dell'utente con una nuova scelta...

CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

PT-2025-20728 · Flytxt · Flytxt Neon-Dx

Name of the Vulnerable Software and Affected Versions: Flytxt NEON-dX version 0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c Description: The issue concerns the userId parameter in the change password function, allowing attackers to execute brute force attacks to discover user passwords. This could potential...

CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

Flytxt NEON-dX 安全漏洞

Flytxt NEON-dX is an enterprise software product from Flytxt for automating intelligent digital customer interactions. A security vulnerability exists in Flytxt NEON-dX that stems from an unvalidated userId parameter in the change password function, which could lead to a brute force attack...

CVE-2023-34732

CVE-2023-34732 affects Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c. The issue is in the userId parameter of the change password function, enabling brute-force attempts to reveal user passwords. Root cause: unvalidated userId input in the change-password path. Impact: potential password dis...