CVE-2024-55585 | moPS up to 1.8.618 API Endpoint resetpassword missing authentication

A vulnerability, which was classified as critical, was found in moPS up to 1.8.618. Affected is an unknown function of the file /api/v1/users/resetpassword of the component API Endpoint. The manipulation leads to missing authentication.

This vulnerability is traded as CVE-2024-55585. It is possible to launch the attack remotely. There is no exploit available.