Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5w2x-g68p-qvmf

Опубликовано: 18 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.

EPSS

Процентиль: 29%
0.00353
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-203

Связанные уязвимости

CVSS3: 5.3
ubuntu
11 месяцев назад

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.

CVSS3: 5.3
nvd
11 месяцев назад

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.

CVSS3: 5.3
debian
11 месяцев назад

GLPI 9.5.7 contains a username enumeration vulnerability in the lost p ...

CVSS3: 7.5
altlinux
больше 4 лет назад

ALT-PU-2022-1914: package `glpi` update to version 10.0.0-alt1

CVSS3: 9.8
altlinux
больше 4 лет назад

ALT-PU-2022-2177: package `glpi` update to version 9.5.8-alt1

EPSS

Процентиль: 29%
0.00353
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-203