| Package | Affected versions | Patched versions |
|---|---|---|
| org.opencrx:opencrx-client | < 5.2.2 | 5.2.2 |
| opencrx | ≤ 5.2.2 |
OpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages received during a password reset which could enable an attacker to determine if a username, email or ID is valid.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free