Описание
PrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which reset attempts do not produce a "This account does not exist" error message.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:prestashop:prestashop:1.7.2.4:*:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.00232
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 5.3
github
больше 3 лет назад
PrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which reset attempts do not produce a "This account does not exist" error message.
EPSS
Процентиль: 46%
0.00232
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-200