CVE-2022-23172: Priority-Software Priority

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset email had been sent to user. This way you can verify which users are in the system and which are not.

Affected products

• Priority-Software Priority: before 22.0 (fixed in 22.0)

Published 2022-07-06. Last modified 2026-06-17.