Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3hmx-7w48-9wcc

Опубликовано: 04 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the database.

User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the database.

EPSS

Процентиль: 23%
0.00077
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-203
CWE-204

Связанные уязвимости

CVSS3: 5.3
nvd
больше 2 лет назад

User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the database.

EPSS

Процентиль: 23%
0.00077
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-203
CWE-204