CVE-2024-2464: Cdex

Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days.

This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.This issue affects CDeX application versions through 5.7.1.

Affected products

• Cdex Cdex: up to and including 5.71

Published 2024-03-21. Last modified 2026-06-17.