CVEvulnerability

CVE-2023-39343

4.3 MEDIUM Published 2023-08-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-204

Description

Sulu is an open-source PHP content management system based on the Symfony framework. It allows over the Admin Login form to detect which user (username, email) exists and which one do not exist. Sulu Installation not using the old Symfony 5.4 security System and previous version are not impacted by this Security issue. The vulnerability has been patched in version 2.5.10.

Affected configurations

• sulu sulu (>= 2.5.0 < 2.5.10)

Related

Weakness · CWE (1)

  • CWE-204 Observable Response Discrepancy weakness

References