Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-39189

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-579x-cjvr-cqj9

Observable Response Discrepancy in Lost Password Service ### Impact It is possible to enumerate usernames via the forgot password functionality ### Patches Update to version `10.1.3` or apply this patch manually: https://github.com/pimcore/pimcore/pull/10223.patch ### Workarounds Apply https://github.com/pimcore/pimcore/pull/10223.patch manually.

gitlab/packagist/pimcore/pimcore/CVE-2021-39189

Information Exposure Through Discrepancy Pimcore is an open source data & experience management platform. A flaw was found identifying it is possible to enumerate usernames via the forgot password functionality.