CVE-2021-20113

An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1

published July 29, 2021

CVSS
—
EPSS
1%
Percentile
70.2
In the wild
Unconfirmed
What it is

An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password reset request was made for an email address that was not registered with a user then we would be presented with an ‘unknown email’ error. If an email is given that is registered with a user then this error will not appear. A malicious actor could abuse this to enumerate the email addresses of

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01299 · 70.2th percentile
Published
2021-07-29T18:00Z
EPSS history
Timeline
  • 29 JUL 18:00Z
    An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1
    cvelistv5