CVE-2023-5840

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Oct 29, 2023
Updated: Nov 8, 2023
CWE ID 640

Summary

CVE-2023-5840: A vulnerability was identified in the linkstackorg/linkstack GitHub repository before version 4.2.9. The issue involves a weak password recovery mechanism for forgotten passwords, which could allow unauthorized access to user accounts through brute-force or dictionary attacks. This vulnerability poses a significant risk to users and requires immediate attention to apply the available patch.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share