CVE-2022-30076

CVE-2022-30076 affects ENTAB ERP 1.0. The issue is an information disclosure where an attacker can discover users’ full names by brute-forcing a sequence of student usernames (e.g., s10000–s20000) due to no rate limiting on login. Documented impact is exposure of user PIIs with potential leakage ...