Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Password Recovery Project Component: Password Recovery Clear all filters
TI-2023-03018 CVE-2023-3222 · GHSA-8j9j-8qff-cvrc

Vulnerability in the password recovery mechanism of Roundcube Password Recovery Plugin

Priority MEDIUM 40

Vulnerability in the password recovery mechanism of Password Recovery plugin for Roundcube, in its 1.2 version, which could allow a remote attacker to change an existing user´s password by adding a 6-digit numeric token.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00674 Published 2023-09-04 No fix listed CWE-640
TI-2023-03017 CVE-2023-3221 · GHSA-3hmx-7w48-9wcc

User enumeration vulnerability in Roundcube Password Recovery Plugin

Priority LOW 31

User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the datab…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00608 Published 2023-09-04 No fix listed CWE-204