Skip to content
OpenAdvisories

Vendor

Gladys Assistant

1 known vulnerabilities.

Products

Gladys Assistant 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-93340

    Gladys Assistant < 5.1.0 Password Reset Link Poisoning via forgot_password Endpoint

    Gladys Assistant before 5.1.0 contains a password reset link poisoning vulnerability that allows unauthenticated remote attackers to obtain valid password reset tokens for any account by exploiting the client-supplied origin parameter in the forgot_password e…

    Gladys Assistant Gladys Assistant