Описание
A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php.
EPSS
Процентиль: 25%
0.00329
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-425
Связанные уязвимости
CVSS3: 4.3
github
2 месяца назад
A low-privileged remote attacker can enumerate all configured users and identify which accounts hold elevated privileges using the endpoint /api/user/fetch-all.php.
EPSS
Процентиль: 25%
0.00329
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-425