Description (CNA)
Raytha CMS is vulnerable to User Enumeration in password reset functionality. Difference in messages could allow an attacker to determine if the login is valid or not, enabling a brute force attack with valid logins. This issue was fixed in version 1.5.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Raytha / Raytha | affected 0 before 1.5.0 |
CWE
CWE-204
References
ADP enrichment
No English description supplied.
No references supplied.