CVE-2023-26984

An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request

High · published March 29, 2023

CVSS v3.1
8.1
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00917 · 59.8th percentile
Published
2023-03-29T00:00Z
EPSS history
Timeline
  • 29 MAR 00:00Z
    An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request
    cvelistv5