CVE-2023-53943 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers ca…
Medium CVSS: 6.9

CVE-2023-53943

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.
Vendor
Glpi-project
Product
Glpi
CWE
CWE-203
Yayın Tarihi
2025-12-18 20:15:52
Güncelleme
2025-12-31 17:34:30
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-203 Glpi MEDIUM Glpi-project 2025

Referanslar

https://glpi-project.org/pt-br/ https://www.exploit-db.com/exploits/51418 https://www.vulncheck.com/advisories/glpi-username-enumeration-vulnerability-via-lost-password-endpoint https://www.exploit-db.com/exploits/51418