Security Advisory

CVE-2021-29023

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-05-17 00:00:00

Last updated 2024-08-03 21:55:12

Assigner mitre

State PUBLISHED

InvoicePlane 1.5.11 doesnt have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable.