Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gjvj-mxx4-qrvq

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack.

YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack.

EPSS

Процентиль: 83%
0.0205
Низкий

Дефекты

CWE-203

Связанные уязвимости

nvd
около 21 года назад

YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack.

EPSS

Процентиль: 83%
0.0205
Низкий

Дефекты

CWE-203