Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vhvc-4f6p-xp27

Опубликовано: 10 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

SpinetiX Fusion Digital Signage 3.4.8 contains a username enumeration vulnerability in its login script that allows attackers to identify valid user accounts. Attackers can send crafted login requests with different usernames to distinguish between existing and non-existing accounts by analyzing the server's error responses.

SpinetiX Fusion Digital Signage 3.4.8 contains a username enumeration vulnerability in its login script that allows attackers to identify valid user accounts. Attackers can send crafted login requests with different usernames to distinguish between existing and non-existing accounts by analyzing the server's error responses.

EPSS

Процентиль: 14%
0.00047
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-203

Связанные уязвимости

CVSS3: 5.3
nvd
около 2 месяцев назад

SpinetiX Fusion Digital Signage 3.4.8 contains a username enumeration vulnerability in its login script that allows attackers to identify valid user accounts. Attackers can send crafted login requests with different usernames to distinguish between existing and non-existing accounts by analyzing the server's error responses.

EPSS

Процентиль: 14%
0.00047
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-203