artemy-ccrsky/CVE-2024-39211

artemy-ccrsky/CVE-2024-39211

GitHubGitHub
GitHubgithub.com
Releases0
Stars7
User Enumeration vulnerability in Kaiten (workflow management system)
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-39211↗
5.3 MEDIUM—

Kaiten 57.128.8 allows remote attackers to enumerate user accounts via a crafted POST request, because a login response contains a user_email field only if the user account exists.