CVE-2024-55374

REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts...

CVE-2024-55374

REDCap version 14.3.13 is vulnerable to username enumeration because the application returns different error messages based on whether a user exists during login attempts. An attacker can exploit this observable discrepancy by sending multiple HTTP authentication requests to perform brute-force a...