Meanstore vulnerabilities
We track 1 vulnerability in Meanstore products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 26, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Meanstore vulnerabilities
- 8.8 High severity
meanstore: Weak Password Recovery Mechanism for Forgotten Password
A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts.