Description
Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification number for all registered users via the Administracion/usuarios/cambiar_password_olvido_validar.php txt_login parameter.
Medium · 5.3
CVE-2025-55342
EUVD-2025-37931GHSA-xx43-6j8m-vx2f
Quipux 4.0.1 through e1774ac allows enumeration of usernames, and accessing the Ecuadorean identification number for all registered users v…
Published Nov 5, 2025 · Updated Nov 6, 2025 · Assigned by mitre