Lucene search

PRIOn knowledge basePRION:CVE-2023-47102

HistoryNov 07, 2023 - 6:15 a.m.

Code injection

2023-11-0706:15:00

PRIOn knowledge base

www.prio-n.com

urbackup

server

2.5.31

code injection

vulnerability

brute-force

enumeration

user accounts

failure message

username

valid

nvd

7.1 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.

CPENameOperatorVersion
urbackup_servereq2.5.31

CPE	Name	Operator	Version
	urbackup_server	eq	2.5.31

References

quantiano.github.io/cve-2023-47102/