4 matches found
CVE-2022-44381
Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...
5.3CVSS6.7AI score0.00653EPSS
SaveExploits1References1
CVE-2022-44381
Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...
5.3CVSS0.00653EPSS
SaveExploits1References1
CVE-2022-44381
Snipe-IT (open source IT asset/license management) up to version 6.0.14 is affected. The vulnerability arises from response variations in the /password/reset endpoint that allow an attacker to determine whether a given user account exists (user enumeration). Impact is limited to information discl...
5.3CVSS5.2AI score0.00653EPSS
SaveExploits1References1Affected Software1
20