Design/Logic Flaw

2021-10-0421:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.0%

An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames.

CPENameOperatorVersion
xiunobbseq4.0.4

CPE	Name	Operator	Version
	xiunobbs	eq	4.0.4

References

gitee.com/xiuno/xiunobbs/issues/I1690W

github.com/wanghaiwei/xiuno-docker/issues/3