CVE-2023-26984

Peppermint CVE-2023-26984 affects Peppermint v0.2.4, with a vulnerability in the password reset function that can let an attacker access emails and passwords on the Tickets page via a crafted request. Several connected sources confirm the issue and, in at least one report, exploitation has occurr...

CVE-2023-26984

An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request...