Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2026/07/13 3:15 p.m.14 views

banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI

Summarybanks = 2.4.1 uses jinja2.Environment unsandboxed to render prompt templates. Applications that pass user-supplied strings as the template argument to Prompt are vulnerable to Server-Side Template Injection SSTI, which can lead to Remote Code Execution RCE on the host system.This is a...

7.5CVSS6.3AI score0.00539EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.14 views

Read-Only Open WebUI Users Can Modify Collaborative Documents via Socket.IO

Read-Only Users Can Modify Collaborative Documents via Socket.IO Affected ComponentSocket.IO collaborative document editing handler:- backend/openwebui/socket/main.py lines 667-721, ydoc:document:update handler Affected VersionsCurrent main branch and likely all versions with collaborative note...

5.4CVSS6.1AI score0.0022EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.14 views

Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning

Redis Cache Keys toolservers and terminalservers Missing Instance Prefix Enable Cross-Instance Cache Poisoning Affected ComponentTool server and terminal server Redis cache:- backend/openwebui/utils/tools.py line 841, toolservers SET- backend/openwebui/utils/tools.py line 850, toolservers GET-...

8.7CVSS6.2AI score0.00305EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.14 views

Magic Wormhole: receive, with --output pointing at an existing directory can be path-traversed

ImpactA receiver who specifies "--output " where that output directory currently exists as a directory. Patches0.24.0 will contain the patch WorkaroundsEnsure local target directories specified by "--output" do not already exist ResourcesPrivate email and Signal communications from a user.Magic...

3.5CVSS6.1AI score0.00197EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.14 views

Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled

Description OverviewWhen LDAP TLS is enabled LDAPUSETLS = True, Lemur's LDAP authentication module unconditionally disables TLS certificate verification at the global ldap module level. This allows a man-in-the-middle attacker positioned between Lemur and the LDAP server to intercept all...

6.8CVSS6.2AI score0.00094EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.14 views

Lemur: LDAP Filter Injection enables post-authentication privilege escalation

Description OverviewLemur's LDAP authentication module lemur/auth/ldap.py constructs LDAP search filters using unsanitized user input via Python string interpolation. An authenticated LDAP user can inject LDAP filter metacharacters through the username field to manipulate group membership queries...

8.1CVSS6.2AI score0.00179EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.14 views

Microdot has HTTP response splitting in Response.set_cookie()

ImpactThe Response.setcookie method does not sanitize its string arguments, and in particular will not detect the presence of the \r\n sequence in them. This can be a potential source of header injection attacks.For a header injection attack through this issue to be possible, an attacker must fir...

3.7CVSS6.1AI score0.00215EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

Prefect Auth Bypass via endswith() Health Check Exemption

A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/health of the component Health Check API. Performing a manipulation results in improper authentication. The attack is possible to be carried out remotely. The exploit is now public...

6.9CVSS5.8AI score0.00453EPSS
SaveExploits0References12Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

mcpo-simple-server has a Path Traversal issue

A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the function deletesharedprompt of the file src/mcposimpleserver/services/promptmanager/basemanager.py. This manipulation of the argument detail causes relative path traversal. It is possible to initiate t...

7.5CVSS6.7AI score0.00512EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

CKAN has Unauthenticated Authorization Bypass in `datastore_search_sql`

ImpactA vulnerability in datastoresearchsql allowed attackers to bypass authorization in order to gain access to private resources and PostgreSQL system information PatchesThe issue has been patched in CKAN 2.10.10 and CKAN 2.11.5 WorkaroundsDisable the DataStore SQL search...

9.1CVSS6.1AI score0.00367EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

CKAN has CSRF exemption primed by anonymous requests

Views can be marked as exempt from CSRF protection Access to the views via tokens or unauthenticated requests marked the endpoint as not requiring CSRF protection. The marking was a member variable in flask-wtf.csrf.CSRFProtect, which was stored as a module level variable in the flaskapp...

6.1CVSS6.1AI score0.00124EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber

ImpactOGC API - Process execution requests can use the subscriber object to requests to internal HTTP services. PatchesThe issue has been patched in master branch and made available as part of the 0.23.3 release. The patch disables any HTTP requests made to internal resources by default unless...

8.6CVSS6.1AI score0.00454EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

notes-mcp has a Path Traversal issue

A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4. This affects an unknown function of the file notesmcp.py. The manipulation of the argument rootdir/path leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed...

7.5CVSS6.6AI score0.0041EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

mkdocs-mcp-plugin has a Path Traversal issue

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function readdocument/listdocuments of the file server.py. Performing a manipulation of the argument docsdir/filepath results in path traversal. The attack is possible to be carried out remotely. The exploit has...

7.5CVSS6.6AI score0.00426EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

Apache Airflow's authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance record

The authenticated /ui/dagsendpoint did not enforce per-DAG access control on embedded Human-in-the-Loop HITL and TaskInstance records: a logged-in Airflow user with read access to at least one DAG could retrieve HITL prompts including their request parameters and full TaskInstance details for DAG...

4.3CVSS6.1AI score0.00352EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

kaggle-mcp has a Path Traversal issue

A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92d. This vulnerability affects the function preparekaggledataset of the file src/kagglemcp/server.py. The manipulation of the argument competitionid leads to path traversal. The attack is possible t...

7.5CVSS6.5AI score0.00411EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

LiteLLM: Server-Side Template Injection in /prompts/test endpoint

ImpactThe POST /prompts/test endpoint accepted user-supplied prompt templates and rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy process.The endpoint only checks that the caller presents a valid proxy API key, so any authenticated user could...

8.8CVSS6.2AI score0.00373EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

InstructLab vulnerable to Path Traversal

A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the logsdir parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to...

7.1CVSS6.1AI score0.00164EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

apache-airflow-providers-keycloak: Missing OAuth 2.0 State and PKCE Enables Login CSRF and Session Fixation

The Keycloak authentication manager in apache-airflow-providers-keycloak did not generate or validate the OAuth 2.0 state parameter on the login / login-callback flow, and did not use PKCE. An attacker with a Keycloak account in the same realm could deliver a crafted callback URL to a victim's...

5.4CVSS6.1AI score0.00328EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures

SummaryThe readonly mode in mcp-neo4j-cypher versions prior to 0.6.0 can be bypassed using CALL procedures. Details ImpactThe enforcing of readonly mode in vulnerable versions could be bypassed by certain APOC procedures. Patchesv0.6.0 release hardened the checks around the mode. The only way to...

2.3CVSS6.1AI score0.00264EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

pypdf: Manipulated FlateDecode image dimensions can exhaust RAM

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. PatchesThis has been fixed in pypdf==6.10.2. WorkaroundsIf you cannot upgrade yet, consider applying the changes from P...

6.8CVSS6AI score0.00226EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

pypdf: Possible long runtimes for wrong size values in incremental mode

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading a PDF with a large trailer /Size value in incremental mode. PatchesThis has been fixed in pypdf==6.10.2. WorkaroundsIf you cannot upgrade yet, consider applying the changes from PR 37...

6.8CVSS6AI score0.00214EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen

uefi-firmware contains a heap out-of-bounds write vulnerability in the native tiano/EFI decompressor. in uefifirmware/compression/Tiano/Decompress.c, ReadCLen reads Number = GetBitsSd, CBIT with CBIT = 9, so Number can be as large as 511, while the destination array Sd-mCLen has NC = 510 elements...

9.8CVSS7AI score
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

wger has Stored XSS via Unescaped License Attribution Fields

Stored XSS via Unescaped License Attribution Fields SummaryThe AbstractLicenseModel.attributionlink property in wger/utils/models.py constructs HTML strings by directly interpolating user-controlled fields licenseauthor, licensetitle, licenseobjecturl, licenseauthorurl, licensederivativesourceurl...

5.4CVSS6.2AI score0.00207EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

MetaGPT affected by server-side request forgery in metagpt/utils/common.py

A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.2. This impacts the function decodeimage of the file metagpt/utils/common.py. The manipulation of the argument imgurlorb64 results in server-side request forgery. It is possible to launch the attack remotely. The exploit ha...

6.5CVSS6.4AI score0.00263EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

pypdf has long runtimes for wrong size values in cross-reference and object streams

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong large /Size values or object streams with wrong large /N values. PatchesThis has been fixed in pypdf==6.10.1. WorkaroundsIf you cannot upgrade yet, consider...

6.9CVSS6AI score0.00297EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.14 views

PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries

SummaryThe tableprefix configuration value is directly used to construct SQL table identifiers without validation.If an attacker controls this value, they can manipulate SQL query structure, leading to unauthorized data access e.g., reading internal SQLite tables such as sqlitemaster and tamperin...

9.8CVSS6.2AI score0.00297EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate

Summaryreadskillfile in skilltools.py allows reading arbitrary files from the filesystem by accepting an unrestricted skillpath parameter. Unlike filetools.readfile which enforces workspace boundary confinement, and unlike runskillscript which requires critical-level approval, readskillfile has...

7.5CVSS6.2AI score0.00234EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

PraisonAI Vulnerable to Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars

Summarydeploy.py constructs a single comma-delimited string for the gcloud rundeploy --set-env-vars argument by directly interpolating openaimodel,openaikey, and openaibase without validating that these values do notcontain commas. gcloud uses a comma as the key-value pair separator...

8.4CVSS6.2AI score0.00231EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits

SummaryThe /media-stream WebSocket endpoint in PraisonAI's call module accepts connections from any client without authentication or Twilio signature validation. Each connection opens an authenticated session to OpenAI's Realtime API using the server's API key. There are no limits on concurrent...

7.5CVSS6.1AI score0.00372EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/utils/common.py

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function getmimetype of the file metagpt/utils/common.py. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The project was...

9.8CVSS6.6AI score0.02283EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

Summaryinternalexrundopiz advances the working wavelet pointer with signed 32-bit arithmetic:cwavbuf += nx ny wcount;Because nx, ny, and wcount are int, a crafted EXR file can make this product overflow and wrap. The next channel then decodes from an incorrect address. The wavelet decode path...

8.8CVSS7AI score0.00482EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

OpenEXR Makes Use of Uninitialized Memory

SummaryWhile fuzzing openexrexrcheckfuzzer, Valgrind reports a conditional branch depending on uninitialized data inside genericunpack. This indicates a use of uninitialized memory CWE-457. The issue is reproducible with the current OSS-Fuzz harness and a single-file PoC. DetailsEnvironment:-...

7.5CVSS7AI score0.00382EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)

Summarycurlcffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl.Because of this, an attacker-controlled URL can redirect requests to internal services such as cloud metadata endpoints. In addition, curlcffi’s TLS impersonation featu...

8.6CVSS6.1AI score0.00463EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

LightRAG: Hardcoded JWT Signing Secret Allows Authentication Bypass

Subject: Security Vulnerability Report Hardcoded JWT Secret CVE-2026-30762Hi HKUDS team,I'm writing to report a security vulnerability I discovered in LightRAG v1.4.10. This has been assigned CVE-2026-30762 by MITRE.Vulnerability: Hardcoded JWT signing secretType: Improper Authentication...

7.5CVSS6.1AI score0.0012EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

Open WebUI has Broken Access Control in Tool Valves

Summary Broken Access Control in Tool ValvesOpen WebUI supports function calling through "Tools". Function calling allows an LLM to reliably connect to external tools and interact with external APIs. Exemplary use-cases include connecting to an internal knowledge base, retrieving emails from an...

7.7CVSS6.2AI score0.05271EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL

SummaryFileTools.downloadfile in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream with followredirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata...

8.6CVSS6.1AI score0.00405EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()

SummaryMCPToolIndex.searchtools compiles a caller-supplied string directly as a Python regular expression with no validation, sanitization, or timeout. A crafted regex causes catastrophic backtracking in the re engine, blocking the Python thread for hundreds of seconds and causing a complete...

7.5CVSS6.1AI score0.00402EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

Summaryrunpython in praisonai constructs a shell command string by interpolating user-controlled code into python3 -c "" and passing it to subprocess.run..., shell=True. The escaping logic only handles \ and ", leaving $ and backtick substitutions unescaped, allowing arbitrary OS command executio...

9.8CVSS6.3AI score0.00545EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution

NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure and data tampering...

9.8CVSS7.1AI score0.00641EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

pypdf has inefficient decoding of array-based streams

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes and/or large memory usage. This requires accessing an array-based stream with lots of entries. PatchesThis has been fixed in pypdf==6.9.1. WorkaroundsIf you cannot upgrade yet, consider applying the changes...

6.5CVSS6.5AI score0.00349EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite

ImpactWhat kind of vulnerability is it? Who is impacted?Receiving a file wormhole receive from a malicious party could result in overwriting critical local files, including /.ssh/authorizedkeys and .bashrc. This could be used to compromise the receiver's computer.Only the sender of the file the...

8.2CVSS6AI score0.0035EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle

SummaryThe ha-mcp OAuth consent form beta feature accepts a user-supplied haurl and makes a server-side HTTP request to haurl/api/config with no URL validation. An unauthenticated attacker can submit arbitrary URLs to perform internal network reconnaissance via an error oracle. Two additional cod...

5.3CVSS6.3AI score0.00278EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

MLflow has a command injection in mlflow/sagemaker/__init__.py

A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the mlflow/sagemaker/init.py file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization, whic...

8.8CVSS7.2AI score0.01456EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

ha-mcp has XSS via Unescaped HTML in OAuth Consent Form

SummaryThe ha-mcp OAuth consent form renders user-controlled parameters via Python f-strings with no HTML escaping. An attacker who can reach the OAuth endpoint and convince the server operator to follow a crafted authorization URL could execute JavaScript in the operator's browser. This affects...

6.8CVSS6.2AI score0.00181EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

Server-Side Request Forgery SSRF in Azure MCP Server allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.1AI score0.00959EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

pypdf: Manipulated FlateDecode XFA streams can exhaust RAM

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires accessing the xfa property of a reader or writer and the corresponding stream being compressed using /FlateDecode. PatchesThis has been fixed in pypdf==6.7.3. WorkaroundsIf projects...

8.7CVSS6.8AI score0.00348EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)

Summary A resource exhaustion vulnerability in joserfc allows an unauthenticated attacker to cause a Denial of Service DoS via CPU exhaustion. When the library decrypts a JSON Web Encryption JWE token using Password-Based Encryption PBES2 algorithms, it reads the p2c PBES2 Count parameter directl...

7.5CVSS6.2AI score0.00432EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata

SummaryA stored Cross-site Scripting XSS vulnerability was identified in the RSE metadata of the WebUI where attacker-controlled input is persisted by the backend and later rendered in the WebUI without proper output encoding. This allows arbitrary JavaScript execution in the context of the WebUI...

6.1CVSS6.3AI score0.00287EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.14 views

Rucio WebUI has Username Enumeration via Login Error Message

SummaryThe WebUI login endpoint returns distinct error messages depending on whether a supplied username exists, allowing unauthenticated attackers to enumerate valid usernames. DetailsWhen submitting invalid credentials to /ui/login, the WebUI responds with different error messages based on the...

5.3CVSS6.1AI score0.00327EPSS
SaveExploits1References9Affected Software1
Total number of security vulnerabilities5000