Information Disclosure

2019-09-2303:20:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

47.5%

JSON

pagekit/pagekit is vulnerable to information disclosure. The vulnerability exists as the ResetPasswordController returns an Unknown email address. message when an email is not in the user database.

CPENameOperatorVersion
pagekit/pagekitle1.0.17

CPE	Name	Operator	Version
	pagekit/pagekit	le	1.0.17

References

github.com/pagekit/pagekit/blob/9761d9ab05ce8962f0f997c398bd2304497a1f57/app/system/modules/user/src/Controller/ResetPasswordController.php#L47

github.com/pagekit/pagekit/issues/935

0.001 Low

EPSS

Percentile

47.5%

JSON

Related for VERACODE:21547