CVE-2023-5840
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Oct 29, 2023
Updated: Nov 8, 2023
CWE ID 640
Summary
CVE-2023-5840: A vulnerability was identified in the linkstackorg/linkstack GitHub repository before version 4.2.9. The issue involves a weak password recovery mechanism for forgotten passwords, which could allow unauthorized access to user accounts through brute-force or dictionary attacks. This vulnerability poses a significant risk to users and requires immediate attention to apply the available patch.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share