Unrated severityNVD Advisory· Published May 17, 2021· Updated Aug 3, 2024
CVE-2021-29023
CVE-2021-29023
Description
InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- InvoicePlane/InvoicePlanedescription
- Range: <=1.5.11
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.