Security Advisory

CVE-2021-29023

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-05-17 00:00:00

Last updated 2026-07-29 16:18:56

Assigner mitre

CVSS score not scored

State PUBLISHED

InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable.