CVE-2023-36127

Summary

CVE-2023-36127 is a vulnerability affecting the PHPJabbers Appointment Scheduler version 3.0. During password recovery, user enumeration occurs, allowing attackers to distinguish valid users from invalid ones based on response differences. This functionality enables potential brute force attacks, posing a serious security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.