| عنوان | Antabot White-Jotter 0.2.2 Observable Response Discrepancy |
|---|
| الوصف | An observable response discrepancy vulnerability exists in the Antabot White-Jotter 0.2.2 application at the /login endpoint. During the login process, the server can return two different responses, "User does not exist" or "Wrong password". This allows attackers to determine the existence of user accounts. By analyzing the distinct responses, attackers can enumerate valid usernames and use this information to perform targeted attacks such as credential stuffing. |
|---|
| المصدر | ⚠️ https://github.com/cydtseng/Vulnerability-Research/blob/main/white-jotter/ObservableDiscrepancy-UserLogin.md |
|---|
| المستخدم | vastzero (UID 78767) |
|---|
| ارسال | 18/12/2024 05:34 PM (2 سنوات منذ) |
|---|
| الاعتدال | 29/12/2024 09:28 AM (11 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 289721 [Antabot White-Jotter حتى 0.2.2 /login username الكشف عن المعلومات] |
|---|
| النقاط | 20 |
|---|