Опубликовано: 20 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 4.3
Описание
A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php.
A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php.
Связанные уязвимости
CVSS3: 4.3
nvd
около 2 месяцев назад
A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php.