In Logpoint before 7.4.0, an attacker can enumerate a valid list of usernames by using publicly exposed URLs of shared widgets.

Published May 1, 2024 · Updated Oct 29, 2024 · Assigned by mitre