CVE-2023-26984

8.1 highEPSS 0.9%

High (8.1) in peppermint peppermint. EPSS 0.9% chance of exploitation in the next 30 days.

An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2023-03-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

peppermint:peppermint

References

https://github.com/Peppermint-Lab/peppermint/tree/master
https://github.com/bypazs/CVE-2023-26984
https://peppermint.sh/
https://github.com/Peppermint-Lab/peppermint/tree/master
https://github.com/bypazs/CVE-2023-26984

Check your stack JSON