CVE-2025-2910

Name of the Vulnerable Software and Affected Versions MeetMe versions prior to 2024-09

Description The issue concerns user enumeration in the password reset module of the MeetMe authentication service. This allows an attacker to determine whether an email address is registered through specific error messages.

Recommendations For versions prior to 2024-09, update to a version released after 2024-09 to resolve the issue. As a temporary workaround, consider restricting access to the password reset module to minimize the risk of exploitation. Avoid using the password reset feature with unverified email addresses until the issue is resolved.