CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0

Medium · published January 30, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00584 · 47.2th percentile
Published
2024-01-30T00:00Z
EPSS history
Timeline
  • 30 JAN 00:00Z
    An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0
    cvelistv5