CVE-2023-26984: Peppermint

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request.

Affected products

• Peppermint Peppermint: version 0.2.4 only

Published 2023-03-29. Last modified 2026-06-17.