CVE-2023-40756

creationtimestamp| type| source ---|---|--- 2023-08-28 16:17:03+00:00| seen| https://t.me/cibsecurity/69295 2024-01-03 22:58:46+00:00| seen| https://t.me/arpsyndicate/2376...

CVE-2023-40756

User enumeration is found in PHPJabbers Callback Widget v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

CVE-2023-40756

PHPJabbers Callback Widget v1.0 is affected by a user-enumeration vulnerability during password recovery, where differing response messages may reveal whether a user exists, enabling brute-force attempts with valid accounts. The NVD lists CVSS 3.1 base score 9.8 (CRITICAL) with network attack vec...