Description
InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable.
Unscored
CVE-2021-29023
EUVD-2021-15669GHSA-q62q-p9mg-92r4
InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predi…
Published May 17, 2021 · Updated Jul 29, 2026 · Assigned by mitre