CVE-2024-1145

User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow a remote user to retrieve all valid users registered in the application just by looking at the request response.
CVSS

No CVSS.

Configurations

No configuration.

History

19 Mar 2024, 13:26

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-19 12:15

Updated : 2024-03-19 13:26


NVD link : CVE-2024-1145

Mitre link : CVE-2024-1145


JSON object : View

Products Affected

No product.

CWE
CWE-204

Observable Response Discrepancy