Lucene search
Veracode Vulnerability DatabaseVERACODE:48457HistoryAug 13, 2024 - 5:15 a.m.
Resource Leakage
2024-08-1305:15:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
resource leakage
github
password reset
vulnerable
improper management
reusable link
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
38.6%
github.com/apache/incubator-answer is vulnerable to Resource Leakage. The vulnerability is due to improper management of the password reset link’s validity, allowing it to remain active and reusable even after it has been used.
Related
vulnrichment
vulnrichment
osv
osv
Apache Answer: The link for resetting user password is not Single-Use
2024-08-12 15:30:50
Apache Answer: The link for resetting user password is not Single-Use in github.com/apache/incubator-answer
2024-08-13 23:22:02
CVE-2024-41888
2024-08-12 13:38:31
github
github
Apache Answer: The link for resetting user password is not Single-Use
2024-08-12 15:30:50
cvelist
cvelist
nvd
nvd
CVE-2024-41888
2024-08-12 13:38:31
cve
cve
CVE-2024-41888
2024-08-12 13:38:31
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
38.6%
Related for VERACODE:48457