CVE-2023-34732

An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to execute brute force attacks to discover user passwords.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - cve@mitre.org

Published

2025-05-12

Last modified

2025-05-13

Weaknesses

CWE-307

Affected products

• Neon-dx (Flytxt)

References

• https://github.com/saykino/CVE-2023-34732