Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/12 9:30 p.m.43 views

CVE-2026-44306 Statamic: Email enumeration via forgot password endpoint

Statamic is a Laravel and Git powered content management system CMS. Prior to 5.73.21 and 6.15.0, responses from the forgot password forms hinted at whether an account existed for a given email address. An unauthenticated attacker could use this to enumerate valid users, which can aid in follow-u...

5.3CVSS0.00206EPSS
SaveExploits0References1
Rows per page
Query Builder