Поиск уязвимостей
Количество 6
Количество 6
CVE-2023-53943
GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.
CVE-2023-53943
GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.
CVE-2023-53943
GLPI 9.5.7 contains a username enumeration vulnerability in the lost p ...
GHSA-5w2x-g68p-qvmf
GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.
ALT-PU-2022-1914
ALT-PU-2022-1914: package `glpi` update to version 10.0.0-alt1
ALT-PU-2022-2177
ALT-PU-2022-2177: package `glpi` update to version 9.5.8-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-53943 GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts. | CVSS3: 5.3 | 0% Низкий | 11 месяцев назад |
 | CVE-2023-53943 GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts. | CVSS3: 5.3 | 0% Низкий | 11 месяцев назад |
| CVE-2023-53943 GLPI 9.5.7 contains a username enumeration vulnerability in the lost p ... | CVSS3: 5.3 | 0% Низкий | 11 месяцев назад |
| GHSA-5w2x-g68p-qvmf GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts. | CVSS3: 5.3 | 0% Низкий | 11 месяцев назад |
| ALT-PU-2022-1914 ALT-PU-2022-1914: package `glpi` update to version 10.0.0-alt1 | CVSS3: 7.5 | больше 4 лет назад | |
| ALT-PU-2022-2177 ALT-PU-2022-2177: package `glpi` update to version 9.5.8-alt1 | CVSS3: 9.8 | больше 4 лет назад |
Уязвимостей на страницу