Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j2hg-vp99-659f

Опубликовано: 13 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 7.5

Описание

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

EPSS

Процентиль: 15%
0.00048
Низкий

6.9 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-204

Связанные уязвимости

CVSS3: 5.3
ubuntu
4 месяца назад

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

CVSS3: 5.3
nvd
4 месяца назад

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

CVSS3: 5.3
debian
4 месяца назад

DokuWiki 2018-04-22b contains a username enumeration vulnerability in ...

EPSS

Процентиль: 15%
0.00048
Низкий

6.9 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-204