PenguinMod-BackendApi vulnerabilities
1 known vulnerability in PenguinMod-BackendApi from PenguinMod. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest first
- 8.7 High severity
PenguinMod-BackendApi is the backend api for penguinmod.
PenguinMod-BackendApi is the backend api for penguinmod. Prior to version 1.0.0, a NoSQL injection vulnerability in the password reset endpoint allows any authenticated user to change the password of an account, leading to full account takeover. An attacker on