Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Jhipster Subscribe
Filtered by product Generator-jhipster-kotlin
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-4072 1 Jhipster 1 Generator-jhipster-kotlin 2020-07-10 5.0 MEDIUM 5.3 MEDIUM
In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts. As the email is provided by a user and the api is public this can be used by an attacker to forge log entries. This is vulnerable to https://cwe.mitre.org/data/definitions/117.html This problem affects only application generated with jwt or session authentication. Applications using oauth are not vulnerable. This issue has been fixed in version 1.7.0.