Lucene search

GitHub Advisory DatabaseGHSA-8QP8-9RPW-J46C

HistoryDec 13, 2023 - 1:26 p.m.

SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.

2023-12-1313:26:34

CWE-200

GitHub Advisory Database

github.com

smtp misconfiguration

forgot password exploit

user enumeration

email leak

vulnerability

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0005 Low

EPSS

Percentile

17.1%

JSON

Impact

A user enumeration attack is possible when SMTP is not setup correctly, but reset password is enabled

Explanation of the vulnerability

Two different error messages was shown, based on if the user exists or not when using the forgot password functionality, when the SMTP was configured but do not response.

Affected configurations

Vulners

Node

umbraco.cmsRange11.0.0≥

umbraco.cmsRange<12.3.4

umbraco.cmsRange9.0.0≥

umbraco.cmsRange<10.8.1

umbraco.cmsRange<8.18.10

CPENameOperatorVersion
umbraco.cmsge11.0.0
umbraco.cmslt12.3.4
umbraco.cmsge9.0.0
umbraco.cmslt10.8.1
umbraco.cmslt8.18.10

Name	Operator	Version
umbraco.cms	ge	11.0.0
umbraco.cms	lt	12.3.4
umbraco.cms	ge	9.0.0
umbraco.cms	lt	10.8.1
umbraco.cms	lt	8.18.10

References

github.com/advisories/GHSA-8qp8-9rpw-j46c

github.com/umbraco/Umbraco-CMS/security/advisories/GHSA-8qp8-9rpw-j46c

nvd.nist.gov/vuln/detail/CVE-2023-49274

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for GHSA-8QP8-9RPW-J46C