| Package | Affected versions | Patched versions |
|---|---|---|
| forgot password | ≥ 3.3.0, < 3.5.1< 3.2.2 | 3.5.13.2.2 |
A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix Forgot Password Appstore module (Mendix 7 compatible) (All versions < V3.2.2). Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to efficiently brute force passwords in specific situations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free