Junglewise Threat Intelligence

CVE-2022-40084: OpenCRX vulnerable to password enumeration via error messages in password reset

CVE-2022-40084 · Severity: low · CVSS 3.1 · Published 2022-10-20

Technologies: org.opencrx:opencrx-client (Maven). Vendors: Maven.

Executive brief

OpenCRX vulnerable to password enumeration via error messages in password reset

Affected products

  • Maven org.opencrx:opencrx-client

Related threats