PT-2019-14753
CVE-2019-16669
·
Published
2019-09-21
·
Updated
2022-05-24
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Pagekit version 1.0.17
Description
The issue concerns the Reset Password feature, which provides different responses based on whether a valid user account's email address is entered. This difference in response might facilitate account enumeration by attackers.
Recommendations
For Pagekit version 1.0.17, consider disabling the Reset Password feature until a patch is available to prevent potential account enumeration.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾