4 matches found
GHSA-424X-CXVH-WQ9P Mautic allows user name enumeration due to response time difference on password reset form
Summary This advisory addresses a security vulnerability in Mautic related to the "Forget your password" functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames. User Enumeration via Timing Attack: A user enumeration vulnerability exists in the...