https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T05:38:00.729790+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-34357 CVE-2023-34357 — Soar Cloud Ltd. HR Portal - Weak Password Recovery Mechanism for Forgotten Password 2026-10-07T05:38:00.749229+00:00

Affected: Soar Cloud Ltd. HR Portal

Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will remain valid after the password has been reset and after the expected expiration date. An attacker with access to the browser history or has the line can thus use the URL again to change the password in order to take over the account.