Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3hmx-7w48-9wcc

Опубликовано: 04 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the database.

User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the database.

EPSS

Процентиль: 38%
0.00459
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-203
CWE-204

Связанные уязвимости

CVSS3: 5.3
nvd
почти 3 года назад

User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the database.

EPSS

Процентиль: 38%
0.00459
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-203
CWE-204