cve/CVE-2021-29023.md at ad8a3fa3088ca10ac9930fca45c36f259b28e921 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-12-30 04:49:42 +00:00

0xMarcio 48a00929ac Removed duplicates

2024-06-18 02:51:15 +02:00

668 B

Raw Blame History

CVE-2021-29023

Description

InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable.

POC

Reference

https://notnnor.github.io/research/2021/03/16/weak-password-recovery-mechanism-in-invoiceplane.html

Github

No PoCs found on GitHub currently.