881 matches found
Information Disclosure In Password Reset Form
weblate is vulnerable to information disclosure in its password reset form. When entering an arbitrary email address in the password reset form, it will report back "User with this email address was not found", allowing to figure out which user accounts exist on the weblate instance...
5.3CVSS5.5AI score0.02306EPSS
SaveExploits0References3Affected Software1
20