CVE-2021-44839

An issue was discovered in Delta RM 1.2. It is possible to request a new password for any other account using the account ID. Using the /listes/DTsendmaildata/adm_utilisateur/send-mail.json endpoint, a user can send a JSON array with user IDs that will have their passwords reset (and new ones sent to their respective e-mail addresses).

• CWE-640

• https://gist.github.com/rntcruz23/16ac2d9dfc7e32b0f57dc7b20f17cd29Third Party Advisory
• https://www.deltarm.comProduct, Vendor Advisory
• https://gist.github.com/rntcruz23/16ac2d9dfc7e32b0f57dc7b20f17cd29Third Party Advisory
• https://www.deltarm.comProduct, Vendor Advisory

Published

Jan 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44832Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding s…6.6
• CVE-2021-44833The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions…9.8
• CVE-2021-44835An issue was discovered in Active Intelligent Visualization …9.8
• CVE-2021-44836An issue was discovered in Delta RM 1.2. The /risque/risque/…4.3
• CVE-2021-44837An issue was discovered in Delta RM 1.2. It is possible for …4.3
• CVE-2021-44838An issue was discovered in Delta RM 1.2. Using the /risque/r…4.3
• CVE-2021-44840An issue was discovered in Delta RM 1.2. Using an privileged…2.7
• CVE-2021-44847A stack-based buffer overflow in handle_request function in …9.8
• CVE-2021-44848In Cibele Thinfinity VirtualUI before 3.0, /changePassword r…5.3
• CVE-2021-44850On Xilinx Zynq-7000 SoC devices, physical modification of an…6.8
• CVE-2021-44852An issue was discovered in BS_RCIO64.sys in Biostar RACING G…7.8
• CVE-2021-44854An issue was discovered in MediaWiki before 1.35.5, 1.36.x b…5.3