Executive brief
OpenCRX vulnerable to password enumeration via error messages in password reset
Affected products
- Maven org.opencrx:opencrx-client
Junglewise Threat Intelligence
CVE-2022-40084 · Severity: low · CVSS 3.1 · Published 2022-10-20
Technologies: org.opencrx:opencrx-client (Maven). Vendors: Maven.
OpenCRX vulnerable to password enumeration via error messages in password reset