Vulnerabilities > CVE-2022-44381

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
CWE-203
NVD
Published: 2022-12-25
Updated: 2022-12-30

Summary

Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request.

Common Weakness Enumeration (CWE)

References