CVE-2019-12743

—

CVSS 3.0

5.3 medium

EPSS

2%p73

Published

Jul 29, 2019 (Jul 29, 2019)

Modified

Jun 17, 2026

Description

HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones) by brute-forcing the username after the /u/ initial URI substring, aka Response Discrepancy Information Exposure.

Vendors: humhub
Products: social network kit
Weakness: CWE-203
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.