Vulnerabilities > CVE-2019-12743 - Information Exposure Through Discrepancy vulnerability in Humhub Social Network KIT 1.3.13
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones) by brute-forcing the username after the /u/ initial URI substring, aka Response Discrepancy Information Exposure.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |