Excavation (User Enumeration) Vulnerability Affects All Released Versions of HumHub
CVE-2024-52043

5.3MEDIUM

Key Information:

Vendor

HumHub GmbH & Co. KG

Status
Humhub
Vendor
CVE Published:
6 November 2024

What is CVE-2024-52043?

Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2.

References

https://www.vulsec.org/advisories
https://github.com/advisories/GHSA-3q4w-rf2j-fx5x
https://https://github.com/humhub/humhub

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.