CVE-2025-1101

A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enumerate valid usernames via crafted HTTP requests.
CVSS

No CVSS.

Configurations

No configuration.

History

12 Feb 2025, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-12 14:15

Updated : 2025-02-12 14:15


NVD link : CVE-2025-1101

Mitre link : CVE-2025-1101


JSON object : View

Products Affected

No product.

CWE
CWE-204

Observable Response Discrepancy