Weintek Weincloud
4 CVEs affecting Weintek Weincloud. Latest disclosed: 2023-07-19. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-34429 | High | 7.5 | 2023-07-19 | Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token. |
CVE-2023-35134 | High | 7.4 | 2023-07-19 | Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only. |
CVE-2023-37362 | High | 7.2 | 2023-07-19 | Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website. |
CVE-2023-32657 | Medium | 5.3 | 2023-07-19 | Weintek Weincloud v0.13.6 could allow an attacker to efficiently develop a brute force attack on credentials with authentication hints from error messag… |