Email and Username Enumeration Vulnerability in Wekan by Wekan

CVE-2018-1000549

What is CVE-2018-1000549?

Wekan version 1.04.0 is affected by an Email and Username Enumeration vulnerability found in the 'Register' and 'Forgot your password?' functionalities. This weakness enables a remote attacker to conduct brute force attacks, allowing them to identify valid usernames and email addresses associated with accounts. The exploitation of this vulnerability can be executed through specially crafted HTTP requests, raising significant security concerns for user account integrity and privacy.

References