CVE-2023-34732

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-307

Affected software

No affected versions have been published.

Timeline

Published: May 12, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-347336.8A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial o CVE-2023-347344.8Annet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting (XSS) .CVE-2023-347359.8Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection.CVE-2023-347367.2Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload.CVE-2023-347389.8Chemex through 3.7.1 is vulnerable to arbitrary file upload.CVE-2023-34746.1A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unkno CVE-2023-347479.8File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.CVE-2023-34756.1A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functio CVE-2023-347509.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=project CVE-2023-347519.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index.php?mode=user&page=groups&acti CVE-2023-347529.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&ac CVE-2023-347539.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&ac