Skip to content
OpenAdvisories

Vendor

automatisch

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.3

    Automatisch through 0.15.0 User Enumeration via Forgot-Password Response Discrepancy

    Automatisch reveals whether an address is registered through the response to its forgot-password request. The controller at packages/backend/src/controllers/internal/api/v1/users/forgot-password.js looks the address up and chains a not-found throw onto the qu…