| タイトル | laravel-started 11.8.0 email enumeration |
|---|
| 説明 | A vulnerability has been identified in Product laravel-starter v11.8.0 that allows an attacker to enumerate valid email addresses through the server's responses to email verification commands in the forget password functionality. This issue arises because the server provides distinguishable responses for valid and invalid email addresses, enabling attackers to determine the existence of specific email addresses on the system.
product github:https://github.com/nasirkhan/laravel-starter |
|---|
| ソース | ⚠️ https://powerful-bulb-c36.notion.site/idor-c6eb58e8fc40416ba53c7915ca0174c4?pvs=4 |
|---|
| ユーザー | louay khammassi (UID 67114) |
|---|
| 送信 | 2024年06月09日 14:08 (2 年 ago) |
|---|
| モデレーション | 2024年06月17日 14:59 (8 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 268784 [nasirkhan Laravel Starter 迄 11.8.0 Password Reset /forgot-password Email 情報漏えい] |
|---|
| ポイント | 17 |
|---|