Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-40767
HistoryAug 28, 2023 - 1:15 p.m.

Design/Logic Flaw

2023-08-2813:15:00
PRIOn knowledge base
www.prio-n.com
5
user enumeration
phpjabbers
password recovery
brute force attack

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.

CPENameOperatorVersion
make_an_offer_widgeteq1.0

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

Related for PRION:CVE-2023-40767