CVEvulnerability
CVE-2024-22646
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-01-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-209
Description
An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system.
Affected configurations
• seopanel seo panel 4.10.0
Related
Weakness · CWE (1)
- CWE-209 Generation of Error Message Containing Sensitive Information weakness
References
- https://github.com/cassis-sec/CVE/tree/main/2024/CVE-2024-22646 Exploit, Third Party Advisory
- https://github.com/cassis-sec/CVE/tree/main/2024/CVE-2024-22646 Exploit, Third Party Advisory