CVE-2019-19806

_account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message indicating whether an email address is configured for the…

published December 30, 2019

CVSS
—
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

_account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message indicating whether an email address is configured for the account name provided. This can be used by an attacker to enumerate accounts by guessing email addresses.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00993 · 62.3th percentile
Published
2019-12-30T17:07Z
EPSS history
Timeline
  • 30 DEC 17:07Z
    _account_forgot_password.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 displays a message indicating whether an email address is configured for the…
    cvelistv5