CVE-2024-48572

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-48572
A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addresses via the "Add a user" feature. The vulnerability occurs due to insufficiently validated user input being processed as a regular expression, which is then matched against email addresses to find duplicate entries.
CVSS

No CVSS.

References
Link Resource
https://github.com/dos-m0nk3y/CVE/tree/main/CVE-2024-48572 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:aquila-cms:aquilacms:*:*:*:*:*:*:*:*
History

22 Apr 2025, 20:23

Type Values Removed Values Added
CPE cpe:2.3:a:aquila-cms:aquilacms:*:*:*:*:*:*:*:*
First Time Aquila-cms
Aquila-cms aquilacms
References () https://github.com/dos-m0nk3y/CVE/tree/main/CVE-2024-48572 - () https://github.com/dos-m0nk3y/CVE/tree/main/CVE-2024-48572 - Third Party Advisory

29 Oct 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-29 22:15

Updated : 2025-04-22 20:23

NVD link : CVE-2024-48572

Mitre link : CVE-2024-48572

JSON object : View

Products Affected

aquila-cms

  • aquilacms
CWE

No CWE.