Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gg4q-gffx-2ffc

Опубликовано: 29 мар. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

** UNSUPPORTED WHEN ASSIGNED ** EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid.

** UNSUPPORTED WHEN ASSIGNED ** EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid.

EPSS

Процентиль: 42%
0.00194
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
nvd
почти 4 года назад

EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid

EPSS

Процентиль: 42%
0.00194
Низкий

5.3 Medium

CVSS3