CVE-2023-42328: Peppermint

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue in PeppermintLabs Peppermint v.0.2.4 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the hardcoded session cookie.

Affected products

• Peppermint Peppermint: up to and including 0.2.4

Published 2023-09-18. Last modified 2026-06-17.