CVE-2019-12743

2019-07-2915:23:27

mitre

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.7%

JSON

HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones) by brute-forcing the username after the /u/ initial URI substring, aka Response Discrepancy Information Exposure.

References

github.com/chanpu9/CVE/blob/master/2019-12743

humhub.org/en/news