CVE-2019-12743

HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones)…

published July 29, 2019

CVSS
—
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones) by brute-forcing the username after the /u/ initial URI substring, aka Response Discrepancy Information Exposure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01504 · 74.1th percentile
Published
2019-07-29T15:23Z
EPSS history
Timeline
  • 29 JUL 15:23Z
    HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones)…
    cvelistv5