Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2019-25338

4 месяца назад

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2019-25338

4 месяца назад

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2019-25338

4 месяца назад

DokuWiki 2018-04-22b contains a username enumeration vulnerability in ...

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-j2hg-vp99-659f

4 месяца назад

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2019-25338

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

CVSS3: 5.3
0%
Низкий
4 месяца назад
nvd логотип
CVE-2019-25338

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

CVSS3: 5.3
0%
Низкий
4 месяца назад
debian логотип
CVE-2019-25338

DokuWiki 2018-04-22b contains a username enumeration vulnerability in ...

CVSS3: 5.3
0%
Низкий
4 месяца назад
github логотип
GHSA-j2hg-vp99-659f

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

CVSS3: 7.5
0%
Низкий
4 месяца назад

Уязвимостей на страницу