CVE-2024-52043

Summary

Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2.

Affected Software

Weaknesses

• CWE-209: CWE-209 Generation of Error Message Containing Sensitive Information

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.vulsec.org/advisories
• https://github.com/advisories/GHSA-3q4w-rf2j-fx5x
• https://https://github.com/humhub/humhub

• ←Previous
• Next→