Skip to content
OpenAdvisories

Package · NuGet

Serenity.Net.Web

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-31286

    User account enumeration in Serenity

    An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the server response leaks the existence of users. If one tries to reset a password of a non-existent user, an error message indicates that this use…

    Serenity.Net.Core Serenity.Net.Web NuGet