Submit #628787: mtons https://gitee.com/mtons/mblog <=3.5.0 Usename Enumeration & Batch Account Registrationinfo

Titelmtons https://gitee.com/mtons/mblog <=3.5.0 Usename Enumeration & Batch Account Registration
BeschreibungThe /register endpoint is used for user account registration, has no CAPTCHA protection, no rate limiting, and error messages show whether the username exists, leading to the ability to brute force usernames or perform batch account registration.
Quelle⚠️ https://gitee.com/mtons/mblog/issues/ICPMJO
Benutzer
 ZAST.AI (UID 87884)
Einreichung05.08.2025 09:14 (vor 9 Monaten)
Moderieren13.08.2025 21:22 (9 days later)
StatusAkzeptiert
VulDB Eintrag320034 [mtons mblog bis 3.5.0 /register Information Disclosure]
Punkte16

Want to stay up to date on a daily basis?

Enable the mail alert feature now!