GitHub Advisoryadvisory · NuGet

GHSA-8qp8-9rpw-j46c SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.

LOW Published 2023-12-13 Modified 2024-01-12 Official page ↗
Aliases
CVE-2023-49274
Ecosystem
NuGet
Packages
Umbraco.CMS
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-200
Reviewed
2023-12-13

Affected packages

• NuGet Umbraco.CMS: >= 8.0.0, < 8.18.10 → fixed in 8.18.10 • NuGet Umbraco.CMS: >= 9.0.0, < 10.8.1 → fixed in 10.8.1 • NuGet Umbraco.CMS: >= 11.0.0, < 12.3.4 → fixed in 12.3.4

Description

Impact A user enumeration attack is possible when SMTP is not setup correctly, but reset password is enabled Explanation of the vulnerability Two different error messages was shown, based on if the user exists or not when using the forgot password functionality, when the SMTP was configured but do not response.

Related

Alias · CVE (1)

  • CVE-2023-49274 Umbraco is an ASP.NET content management system (CMS). vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References