CVE-2024-42163

8.1 highEPSS 0.3%

High (8.1) in fiware keyrock. EPSS 0.3% chance of exploitation in the next 30 days.

Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to take over the account of any user by predicting the token for the password reset link.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-326
Published: 2024-08-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fiware:keyrock

References

https://www.ait.ac.at/themen/cyber-security/pentesting/security-advisories

Check your stack JSON