2 matches found
EUVD-2026-46407
djangoSIGE through 1.10 commit a6fe7e8 contains a user enumeration vulnerability in ForgotPasswordView within djangosige/apps/login/views.py that allows unauthenticated attackers to identify valid accounts by observing distinct error messages returned by the password reset endpoint. Attackers can...
6.9CVSS6AI score0.00424EPSS
SaveExploits0References4
CVE-2026-64822 djangoSIGE 1.10 User Enumeration via ForgotPasswordView
djangoSIGE through 1.10 commit a6fe7e8 contains a user enumeration vulnerability in ForgotPasswordView within djangosige/apps/login/views.py that allows unauthenticated attackers to identify valid accounts by observing distinct error messages returned by the password reset endpoint. Attackers can...
6.9CVSS0.00424EPSS
SaveExploits0References3
20