Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2021/09/20 7:53 p.m.43 views

Observable Response Discrepancy in Lost Password Service

Impact It is possible to enumerate usernames via the forgot password functionality Patches Update to version 10.1.3 or apply this patch manually: https://github.com/pimcore/pimcore/pull/10223.patch Workarounds Apply https://github.com/pimcore/pimcore/pull/10223.patch manually...

5.3CVSS5.7AI score0.01284EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder