Lucene search
Veracode Vulnerability DatabaseVERACODE:47242HistoryMay 29, 2024 - 7:49 a.m.
Information Disclosure
2024-05-2907:49:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
silverstripe
login vulnerability
attackers
7 High
AI Score
Confidence
Low
silverstripe/framework is vulnerable to Information Disclosure. The vulnerability is due to inconsistent handling of login attempts for non-existent users. This allows attackers to discern valid user accounts and enumerate valid user accounts by observing differences in error messages or behavior.
7 High
AI Score
Confidence
Low