Lucene search
PRIOn knowledge basePRION:CVE-2023-31286HistoryApr 27, 2023 - 3:15 a.m.
Cross site request forgery (csrf)
2023-04-2703:15:00
PRIOn knowledge base
www.prio-n.com
4
cross site request forgery
password reset
user existence leakage
An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the server response leaks the existence of users. If one tries to reset a password of a non-existent user, an error message indicates that this user does not exist.
| CPE | Name | Operator | Version |
|---|---|---|---|
| serene | lt | 6.7.0 | |
| startsharp | lt | 6.7.0 |
Related
cve
cve
CVE-2023-31286
2023-04-27 03:15:10
osv
osv
User account enumeration in Serenity
2023-04-27 03:30:23
CVE-2023-31286
2023-04-27 03:15:10
cvelist
cvelist
CVE-2023-31286
2023-04-27 00:00:00
nvd
nvd
CVE-2023-31286
2023-04-27 03:15:10
github
github
User account enumeration in Serenity
2023-04-27 03:30:23
packetstorm
packetstorm