CVE-2019-25338CWE-204

Dokuwiki 2018-04-22b - Username Enumeration

Medium · published February 12, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00473 · 39.9th percentile
Weakness
CWE-204 · Observable Response Discrepancy
Published
2026-02-12T22:48Z
EPSS history
Timeline
  • 12 FEB 22:48Z
    Dokuwiki 2018-04-22b - Username Enumeration
    cvelistv5