CVE-2023-38871

Summary

CVE-2023-38871: The April 2023 commit 3730880 and version 0.9-beta1 of gugoan Economizzer uncovered a user enumeration vulnerability. In the login and forgot password functionalities, the app responds distinctly to valid and invalid usernames or email addresses. This distinction enables an attacker to ascertain whether a given username or email address is valid or proceed with brute-force attacks to discover valid credentials.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.