CVE-2024-34336

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the…

Medium · published September 12, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.1th percentile
Published
2024-09-12T00:00Z
EPSS history
Timeline
  • 12 SEP 00:00Z
    User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the…
    cvelistv5