CVE-2023-27464

MediumCVSS 5.3/10Last modified Oct 24, 2026

Description

A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forgot Password (Mendix 8 compatible) (All versions < V4.1.1), Mendix Forgot Password (Mendix 9 compatible) (All versions < V5.1.1). The affected versions of the module contain an observable response discrepancy issue that could allow an attacker to retrieve sensitive information.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-204CWE-203

Affected software

No affected versions have been published.

Timeline

Published
Apr 11, 2023
Last modified
Oct 24, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-274654.6A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), CVE-2023-274697.1Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message in which FullFileNameCVE-2023-27475.5The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.CVE-2023-274707.0BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROCVE-2023-274715.5An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect and validate informatCVE-2023-274726.1quickentity-editor-next is an open source, system local, video game asset editor. In affected versions HTML tags in entity names are not sanCVE-2023-274745.4Directus is a real-time API and App dashboard for managing SQL database content. Instances relying on an allow-listed reset URL are vulnerabCVE-2023-274758.8Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zCVE-2023-274767.5OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) web service interface standards, and their related cCVE-2023-274774.3wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the CVE-2023-274786.5libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previCVE-2023-274799.9XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with