Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-EC307D9A91C4B96BC9B693B886FDFB72HistoryApr 01, 2024 - 12:00 a.m.
CasaOS Username Enumeration - Bypass of CVE-2024-24766
2024-04-0100:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
14
casaos
username enumeration
vulnerability
login page
patched
software
CVSS3
6.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0
Percentile
15.5%
The Casa OS Login page has disclosed the username enumeration vulnerability in the login page which was patched in CasaOS v0.4.7.
Affected configurations
Node
gocasaos-userserviceMatch0.4.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| go | casaos-userservice | 0.4.7 | cpe:2.3:a:go:casaos-userservice:0.4.7:*:*:*:*:*:*:* |
References
Related
vulnrichment
vulnrichment
CVE-2024-28232 Username Enumeration in CasaOS via bypass of CVE-2024-24766
2024-04-01 16:42:05
CVE-2024-24766 CasaOS Username Enumeration
2024-03-06 18:10:25
cvelist
cvelist
CVE-2024-28232 Username Enumeration in CasaOS via bypass of CVE-2024-24766
2024-04-01 16:42:05
CVE-2024-24766 CasaOS Username Enumeration
2024-03-06 18:10:25
cve
cve
CVE-2024-28232
2024-04-01 17:15:45
CVE-2024-24766
2024-03-06 19:15:07
osv
osv
CasaOS Username Enumeration - Bypass of CVE-2024-24766
2024-04-01 15:48:15
CVE-2024-24766
2024-03-06 19:15:07
Username enumeration in github.com/IceWhaleTech/CasaOS-UserService
2024-03-14 17:12:59
github
github
CasaOS Username Enumeration - Bypass of CVE-2024-24766
2024-04-01 15:48:15
CasaOS Username Enumeration
2024-03-06 15:23:53
gitlab
gitlab
CasaOS Username Enumeration
2024-03-06 00:00:00
prion
prion
Design/Logic Flaw
2024-03-06 19:15:00
veracode
veracode
Username Enumeration
2024-03-07 08:02:43
Username Enumeration
2024-04-02 11:43:06
nvd
nvd
CVE-2024-24766
2024-03-06 19:15:07
CVE-2024-28232
2024-04-01 17:15:45
CVSS3
6.2
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0
Percentile
15.5%
Related for GITLAB-EC307D9A91C4B96BC9B693B886FDFB72