CVE-2021-36436
5.3MEDIUMAn issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered information via submission to the forgotten-password endpoint.
Publicado: 4/20/2023Actualizado: 2/5/2025
Descripción
An issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered information via submission to the forgotten-password endpoint.
Análisis IAImpulsado por IA
Productos Afectados
mobicintmobicint
3.0
Referencias
- https://github.com/Laransec/MobicintExploitThird Party Advisory
- https://github.com/Laransec/MobicintExploitThird Party Advisory