CVE-2024-2463

—

CVSS 3.1

8.0 high

EPSS

<1%p47

Published

Mar 21, 2024 (Mar 21, 2024)

Modified

Jun 17, 2026

Description

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1.

Vendors: cdex
Products: cdex
Weakness: CWE-640
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.