VYPR
← All advisories
High severity7.8NVD Advisory· Published Sep 7, 2023· Updated Jun 17, 2026

CVE-2023-34357

CVE-2023-34357

Description

Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will remain valid after the password has been reset and after the expected expiration date. An attacker with access to the browser history or has the line can thus use the URL again to change the password in order to take over the account.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Scshr/Hr Portal2 versions
    cpe:2.3:a:scshr:hr_portal:7.3.2023.0510:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:scshr:hr_portal:7.3.2023.0510:*:*:*:*:*:*:*
    • cpe:2.3:a:scshr:hr_portal:7.3.2023.0705:*:*:*:*:*:*:*
  • Soar Cloud System Co., Ltd./HR Portalllm-fuzzy
  • Soar Cloud Ltd./HR Portalv5
    Range: 7.3.2023.0510

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.