| Package | Affected versions | Patched versions |
|---|---|---|
| forgot password | ≥ 4.0.0, < 4.1.1≥ 5.0.0, < 5.1.1< 3.7.1 | 4.1.15.1.13.7.1 |
A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forgot Password (Mendix 8 compatible) (All versions < V4.1.1), Mendix Forgot Password (Mendix 9 compatible) (All versions < V5.1.1). The affected versions of the module contain an observable response discrepancy issue that could allow an attacker to retrieve sensitive information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free