Approved changes feed: RSS · Atom
cpe:2.3:a:soar_cloud_ltd.:hr_portal:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Soar Cloud Ltd. (097366b2-867b-5f0e-b242-2f594865e94d) |
|---|---|
| Product | Hr Portal (5badba64-a400-5dc2-be88-4aaa674d4ec8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-34357 |
vulnerable | 2026-06-08 06:06:25.337226 |
Soar Cloud Ltd. HR Portal - Weak Password Recovery Mechanism for Forgotten Password
HIGH (7.8)
Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will remain valid after the password has been reset and after the expected expiration date. An attacker with access to the browser history or has the line can thus use the URL again to change the password in order to take over the account.
Published: 2023-09-07T02:00:15.946Z
Updated: 2024-09-26T19:50:30.068Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.