CVE:CVE-2021-29023
CNNVD:CNNVD-202105-1116
InvoicePlane是一个应用软件。提供一个自托管的开源应用程序，用于管理您的报价，发票，客户和付款。
InvoicePlane 1.5.11 存在安全漏洞，该漏洞源于对密码重置没有任何速率限制，重置令牌是使用可预测的弱机制生成的。
solution:Upgrade invoiceplane invoiceplane to a higher version than 1.5.11,and avoid the version 1.5.11
solution:Upgrade codesys control_for_beaglebone_sl to a higher version than 4.0.1.0,and avoid the version [3.0,4.0.1.0); Upgrade codesys control_for_empc-a/imx6_sl to a higher version than 4.0.1.0,and avoid the version [3.0,4.0.1.0); Upgrade codesys control_for_iot2000_sl to a higher version than 4.0.1.0,and avoid the version [3.0,4.0.1.0); Upgrade codesys control_for_linux_sl to a higher version than 4.0.1.0,and avoid the version [3.0,4.0.1.0); Upgrade codesys control_for_pfc100_sl to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys control_for_pfc200_sl to a higher version than 3.5.16.0,and avoid the version [3.0,3.5.16.0); Upgrade codesys control_for_raspberry_pi_sl to a higher version than 4.0.1.0,and avoid the version [3.0,4.0.1.0); Upgrade codesys control_runtime_system_toolkit to a higher version than 3.5.16.70,and avoid the version [3.0,3.5.16.70); Upgrade codesys development_system to a higher version than 3.5.16.70,and avoid the version [3.0,3.5.16.70); Upgrade codesys edge_gateway to a higher version than 3.5.16.70,4.1.0.0,and avoid the version [3.0,3.5.16.70),[3.0,4.1.0.0); Upgrade codesys gateway to a higher version than 3.5.16.70,and avoid the version [3.0,3.5.16.70)