Forgot Password vulnerabilities

2 known vulnerabilities in Forgot Password from Mendix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Mendix Forgot Password Appstore module: Improper Restriction of Excessive Authentication Attempts

  CVE-2022-26314Mar 8, 2022SiemensEPSS 1.49%

  A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix Forgot Password Appstore module (Mendix 7 compatible) (All versions < V3.2.2). Initial passwords are generated in an insecure manner. This c

• 9.8 Critical severity

  Mendix Forgot Password Appstore module: Improper Access Control

  CVE-2022-26313Mar 8, 2022Siemens

  A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1). In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts.