Submit #470429: Mtons mblog 3.5.0 Observable Response Discrepancyinfo

TitleMtons mblog 3.5.0 Observable Response Discrepancy
DescriptionAn observable response discrepancy vulnerability exists in the Mtons mblog 3.5.0 application at the /login endpoint. The application's responses differ for invalid and valid usernames during login attempts, allowing attackers to determine the existence of user accounts. By analyzing the distinct responses, attackers can enumerate valid usernames and use this information to perform targeted attacks such as credential stuffing or brute force.
Source⚠️ https://github.com/cydtseng/Vulnerability-Research/blob/main/mblog/ObservableDiscrepancy-UserLogin.md
User
 vastzero (UID 78767)
Submission12/27/2024 10:03 PM (2 months ago)
Moderation01/08/2025 03:37 PM (12 days later)
StatusAccepted
VulDB Entry290790 [langhsu Mblog Blog System 3.5.0 /login observable response discrepancy]
Points20

Might our Artificial Intelligence support you?

Check our Alexa App!