An issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered information via submission to the forgotten-password endpoint.
References
Link Resource
https://github.com/Laransec/Mobicint Exploit Third Party Advisory
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2023-04-20T00:00:00

Updated: 2023-04-20T00:00:00

Reserved: 2021-07-12T00:00:00


Link: CVE-2021-36436

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2023-04-20T21:15:08.510

Modified: 2023-05-02T01:47:55.997


Link: CVE-2021-36436

JSON object: View

cve-icon Redhat Information

No data.

CWE