CVE-2020-15132

Sulu CMS vulnerability CVE-2020-15132 affects Sulu versions prior to 1.6.35, 2.0.10, and 2.1.1. The Forget Password flow reveals whether a username exists by returning a 400 with a message when the user is not found, enabling user enumeration. Additionally, a successful Forgot Password request re...