2 matches found
CVE-2025-13166
The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received during the OTP initiation process. This weakness can be exploited by an attacker to discover valid usernames within the system. The...
3.7CVSS0.00217EPSS
SaveExploits0References1
CVE-2025-13166: Observable Discrepancy
The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received during the OTP initiation process. This weakness can be exploited by an attacker to discover valid usernames within the system. The...
3.7CVSS5.9AI score0.00217EPSS
SaveExploits0References2
20