| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | CVE-2026-33877 | 15 Apr 202619:11 | – | attackerkb |
 | CVE-2026-33877 | 15 Apr 202617:07 | – | circl |
 | ApostropheCMS security vulnerability | 15 Apr 202600:00 | – | cnnvd |
 | CVE-2026-33877 ApostropheCMS: User Enumeration via Timing Side Channel in Password Reset Endpoint | 15 Apr 202619:11 | – | cvelist |
 | EUVD-2026-23015 | 16 Apr 202620:42 | – | euvd |
 | ApostropheCMS: User Enumeration via Timing Side Channel in Password Reset Endpoint | 16 Apr 202620:42 | – | github |
 | CVE-2026-33877 | 15 Apr 202619:11 | – | mend |
 | CVE-2026-33877 | 15 Apr 202620:16 | – | nvd |
 | CVE-2026-33877 ApostropheCMS: User Enumeration via Timing Side Channel in Password Reset Endpoint | 15 Apr 202619:11 | – | osv_cve |
| GHSA-MJ7R-X3H3-7RMR ApostropheCMS: User Enumeration via Timing Side Channel in Password Reset Endpoint | 16 Apr 202620:42 | – | osv_ghsa |
10
Node
[
{
"vendor": "apostrophecms",
"product": "apostrophe",
"versions": [
{
"version": "< 4.29.0",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| username | query param | /api/v1/@apostrophecms/login/reset-request | Timing side-channel vulnerability in the password reset endpoint allows for unauthenticated username and email enumeration due to lack of delay normalization when a valid user is found. | CWE-208 |
| query param | /api/v1/@apostrophecms/login/reset-request | Timing side-channel vulnerability in the password reset endpoint allows for unauthenticated username and email enumeration due to lack of delay normalization when a valid user is found. | CWE-208 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 10:38Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.13.7
EPSS0.00319
SSVC