Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xpxq-44xv-wmh3

Опубликовано: 18 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.9
CVSS3: 3.7

Описание

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.

EPSS

Процентиль: 6%
0.00024
Низкий

2.9 Low

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-203

Связанные уязвимости

CVSS3: 3.7
nvd
6 месяцев назад

A security flaw has been discovered in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.

EPSS

Процентиль: 6%
0.00024
Низкий

2.9 Low

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-203