CVE-2019-16669
CVE-2019-16669
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is entered, which might make it easier for attackers to enumerate accounts.
CVSS 5.3 · Medium · EPSS 1.1%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
pagekit/pagekit Packagist
- Versions
- 1.0.17
No fix published