CVE-2021-25672 - AskarLabs CVE Database

CVE-2021-25672

Vendor Siemens

Product Mendix Forgot Password Appstore module

Weakness CWE-284

Published March 15, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability has been identified in Mendix Forgot Password Appstore module (All Versions < V3.2.1). The Forgot Password Marketplace module does not properly control access. An attacker could take over accounts.

Key dates

02Disclosure timeline

March 15, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-25672 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html