CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

CVE-2023-34732

creationtimestamp| type| source ---|---|--- 2025-05-12 18:47:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loyn2dzjuq2e 2025-05-12 22:48:43+00:00| seen| https://t.me/cvedetector/25116...

CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords...

CVE-2023-34732

The Flytxt NEON-dX software (specifically version v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c ) contains an Authenticated Function Abuse vulnerability. The change password function relies on the userId parameter instead of the authenticated session or token, allowing an attacker to brute-force other user...