CVE-2021-36436: Mobicint

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered information via submission to the forgotten-password endpoint.

Affected products

• Mobicint Mobicint: version 3.0 only

Published 2023-04-20. Last modified 2026-06-17.