Description
Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension) to a URL.
Unscored
CVE-2023-49948
EUVD-2023-53843GHSA-jg89-564w-4gwr
Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension)…
Published Dec 3, 2023 · Updated Aug 2, 2024 · Assigned by mitre