Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/03/12 9:31 p.m.36 views

CVE-2026-32598 OneUptime: Password Reset Token Logged at INFO Level

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.24, the password reset flow logs the complete password reset URL — containing the plaintext reset token — at INFO log level, which is enabled by default in production. Anyone with access to application logs log...

6.9CVSS0.00235EPSS
SaveExploits1References1
Rows per page
Query Builder