Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Ebankit Clear all filters
TI-2023-16452 CVE-2023-33291 · GHSA-8rvv-m62r-89wp

In ebankIT 6, the public endpoints /public/token/Email/generate and…

Priority LOW 34

In ebankIT 6, the public endpoints /public/token/Email/generate and /public/token/SMS/generate allow generation of OTP messages to any e-mail address or phone number without validation.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00889 Published 2023-05-28 No fix listed CWE-276