CVE-2022-44381

5.3MEDIUM

Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request.

发布于: 12/25/2022更新于: 4/15/2025
在NVD查看在MITRE查看

描述

Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request.

AI分析AI驱动

受影响产品

snipeitappsnipe-it

参考资料