CVE-2025-62236
Frontier Airlines publicly available email address validation
The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, possibly aiding in further attacks.
CVSS 4.0 · 6.9 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products