AlfnRU vulnerabilities

Products

• Password Recovery Plugin 2

Latest AlfnRU CVEs

Newest publication first

1. CVE-2023-3222 Vulnerability in the password recovery mechanism of Roundcube Password Recovery Plugin

   Published 2023-09-04

   High·CVSS 7.5 EPSS 0.67%

   Vulnerability in the password recovery mechanism of Password Recovery plugin for Roundcube, in its 1.2 version, which could allow a remote attacker to change an existing user´s password by adding a 6-digit numeric token. An attacker could create an automatic script to test all po...

2. CVE-2023-3221 User enumeration vulnerability in Roundcube Password Recovery Plugin

   Published 2023-09-04

   Medium·CVSS 5.3 EPSS 0.61%

   User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the database.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.