GHSA-jh2j-7248-9p3cMediumCVSS 5.3

Pagekit User enumeration

Published
May 24, 2022
Last Modified
April 24, 2024

🔗 CVE IDs covered (1)

📋 Description

The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is entered, which might make it easier for attackers to enumerate accounts.

🎯 Affected products1

  • composer/pagekit/pagekit:= 1.0.17

🔗 References (3)