exploitDog

CVE-2021-28399

Опубликовано: 26 апр. 2021

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function.

Ссылки

https://github.com/C1inton/CVE-Record/blob/master/CVE%20Record/%5BCVE-2021-28399%5DOrangeHRM%204.7.md
Broken Link
Third Party Advisory
https://www.orangehrm.com/
Vendor Advisory
https://github.com/C1inton/CVE-Record/blob/master/CVE%20Record/%5BCVE-2021-28399%5DOrangeHRM%204.7.md
Broken Link
Third Party Advisory
https://www.orangehrm.com/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:orangehrm:orangehrm:4.7:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00711

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2021-28399

CVSS3: 5.3

debian

почти 5 лет назад

OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid us ...

GHSA-j4rv-w4j7-w5fq

github

больше 3 лет назад

OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function.

EPSS

Процентиль: 72%

0.00711

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo