CVE-2018-25350

CVE-2018-25350 affects userSpice 4.3.24. An unauthenticated attacker can enumerate valid usernames by POSTing to existingUsernameCheck.php and inspecting the response for the string 'taken'. The vulnerability enables username discovery with network access and low attack complexity, impacting conf...