CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which…

published March 15, 2017

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02306 · 83.1th percentile
Published
2017-03-15T15:00Z
EPSS history
Timeline
  • 15 MAR 15:00Z
    The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which…
    cvelistv5