| Package | Affected versions | Patched versions |
|---|---|---|
| invoiceplane | = 1.5.11 |
InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free