https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:59:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-241945 EUVD-2026-241945 https://cve.radiocsirt.org/vuln/euvd-2026-241945 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47057 <p>SummaryThis advisory addresses a security vulnerability in Mautic related to the &#34;Forget your password&#34; functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames.</p> <p>User Enumeration via Timing Attack: A user enumeration vulnerability exists in the &#34;Forget your password&#34; functionality. Differences in response times for existing and non-existing users, combined with a lack of request limiting, allow an attacker to determine the existence of usernames through a timing-based attack.</p> <p>MitigationPlease update to a version that addresses this timing vulnerability, where password reset responses are normalized to respond at the same time regardless of user existence.</p> <p>SummaryThis advisory addresses a security vulnerability in Mautic related to the &#34;Forget your password&#34; functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames.</p> <p>User Enumeration via Timing Attack: A user enumeration vulnerability exists in the &#34;Forget your password&#34; functionality. Differences in response times for existing and non-existing users, combined with a lack of request limiting, allow an attacker to determine the existence of usernames through a timing-based attack.</p> <p>MitigationPlease update to a version that addresses this timing vulnerability, where password reset responses are normalized to respond at the same time regardless of user existence.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47057 https://cve.radiocsirt.org/vuln/ghsa-424x-cxvh-wq9p <p><strong>Affected:</strong> Packagist: mautic/core</p> <p>### Summary</p> <p>This advisory addresses a security vulnerability in Mautic related to the &#34;Forget your password&#34; functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames.</p> <p>User Enumeration via Timing Attack: A user enumeration vulnerability exists in the &#34;Forget your password&#34; functionality. Differences in response times for existing and non-existing users, combined with a lack of request limiting, allow an attacker to determine the existence of usernames through a timing-based attack.</p> <p>### Mitigation Please update to a version that addresses this timing vulnerability, where password reset responses are normalized to respond at the same time regardless of user existence.</p> <p>### Workarounds None</p> <p>If you have any questions or comments about this advisory: Email us at security@mautic.org</p> <p><strong>Affected:</strong> Packagist: mautic/core</p> <p>### Summary</p> <p>This advisory addresses a security vulnerability in Mautic related to the &#34;Forget your password&#34; functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames.</p> <p>User Enumeration via Timing Attack: A user enumeration vulnerability exists in the &#34;Forget your password&#34; functionality. Differences in response times for existing and non-existing users, combined with a lack of request limiting, allow an attacker to determine the existence of usernames through a timing-based attack.</p> <p>### Mitigation Please update to a version that addresses this timing vulnerability, where password reset responses are normalized to respond at the same time regardless of user existence.</p> <p>### Workarounds None</p> <p>If you have any questions or comments about this advisory: Email us at security@mautic.org</p> https://cve.radiocsirt.org/vuln/ghsa-424x-cxvh-wq9p