CVE-2023-35134 — Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password

CVE-2023-35134

Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password PUBLISHED

Description (CNA)

Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only.

Vendor / product	Versions
Weintek / Weincloud	affected 0 through 0.13.6

CWE-640

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.