Security Advisory

CVE-2023-31286

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-04-27 00:00:00

Last updated 2025-02-13 16:49:49

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the server response leaks the existence of users. If one tries to reset a password of a non-existent user, an error message indicates that this user does not exist.

← Browse all CVEs View on cve.org ↗