CVE-2022-26313

CVE-2022-26313

Vendor Siemens
Product Mendix Forgot Password Appstore module
Weakness CWE-284
Published March 8, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1). In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts.

Key dates

02Disclosure timeline

March 8, 2022 CVE published
August 3, 2024 Record updated