CVE-2024-2463

CVE-2024-2463: Weak password recovery mechanism in CDeX

Vendor Cdex Psa

Product CDeX

Weakness CWE-640 · Weak password recovery

Published March 21, 2024

Last update August 1, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1.

Key dates

02Disclosure timeline

March 21, 2024 CVE published

August 1, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-2463 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/640.html

Related vulnerabilities

04Related CVE

CVE-2025-7881 Mercusys MW301R Web Interface password recovery CVE-2021-25961 SuiteCRM - Account Takeover in Password Reset Functionality CVE-2021-36804 Akaunting Password Reset Relay CVE-2018-16529 CVE-2025-62406 Piwigo is vulnerable to one-click account takeover by modifying the password-reset link