UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.
References
| Link | Resource |
|---|---|
| https://quantiano.github.io/cve-2023-47102/ | Exploit Third Party Advisory |
Configurations
Information
Published : 2023-11-07 06:15
Updated : 2023-11-13 19:38
NVD link : CVE-2023-47102
Mitre link : CVE-2023-47102
JSON object : View
Products Affected
urbackup
- urbackup_server
CWE
CWE-203
Observable Discrepancy
