Description
An issue in Aranda PassRecovery v1.0 allows attackers to enumerate valid user accounts in Active Directory via sending a crafted POST request to /user/existdirectory/1.
High · 7.5
CVE-2025-45994
EUVD-2025-31378GHSA-45g2-pwgf-cj2v
An issue in Aranda PassRecovery v1.0 allows attackers to enumerate valid user accounts in Active Directory via sending a crafted POST reque…
Published Sep 26, 2025 · Updated Sep 29, 2025 · Assigned by mitre