Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5w2x-g68p-qvmf

Опубликовано: 18 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.

EPSS

Процентиль: 16%
0.0005
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-203

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 2 месяцев назад

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.

CVSS3: 5.3
nvd
около 2 месяцев назад

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.

CVSS3: 5.3
debian
около 2 месяцев назад

GLPI 9.5.7 contains a username enumeration vulnerability in the lost p ...

EPSS

Процентиль: 16%
0.0005
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-203