CVE-2022-23172
—CVSS 3.1
4.3 medium
EPSS
<1%p36
Published
()
Modified
Description
An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset email had been sent to user. This way you can verify which users are in the system and which are not.
- Vendors
- priority-software
- Products
- priority
- Weakness
- CWE-640
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.