CVE-2022-26313

A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1. In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts...

CVE-2022-26314

A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1, Mendix Forgot Password Appstore module Mendix 7 compatible All versions V3.2.2. Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to...

PT-2022-17781

Name of the Vulnerable Software and Affected Versions Mendix Forgot Password Appstore module versions 3.3.0 through 3.5.0 Description A vulnerability has been identified in certain configurations of the Mendix Forgot Password Appstore module, where a threat actor could use the sign up flow to...

CVE-2022-26313: Improper Access Control

A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1. In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts...

CVE-2022-26314: Improper Restriction of Excessive Authentication Attempts

A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1, Mendix Forgot Password Appstore module Mendix 7 compatible All versions V3.2.2. Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to...

PT-2022-17782

Name of the Vulnerable Software and Affected Versions Mendix Forgot Password Appstore module versions 3.3.0 through 3.5.0 Mendix Forgot Password Appstore module Mendix 7 compatible versions prior to 3.2.2 Description A security issue has been found where initial passwords are generated in an...

PT-2021-16743

Name of the Vulnerable Software and Affected Versions Mendix Forgot Password Appstore module versions prior to 3.2.1 Description A vulnerability has been identified in the Mendix Forgot Password Appstore module. The Forgot Password Marketplace module does not properly control access, allowing an...

CVE-2021-25672: Improper Access Control

A vulnerability has been identified in Mendix Forgot Password Appstore module All Versions V3.2.1. The Forgot Password Marketplace module does not properly control access. An attacker could take over accounts...