PwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by leveraging response messages for authentication attempts.
References
Link | Resource |
---|---|
https://github.com/pwndoc/pwndoc/issues/382 | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2022-10-29 17:15
Updated : 2022-12-12 12:59
NVD link : CVE-2022-44023
Mitre link : CVE-2022-44023
JSON object : View
CWE
CWE-307
Improper Restriction of Excessive Authentication Attempts
Products Affected
pwndoc_project
- pwndoc