User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the database.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: INCIBE
Published: 2023-09-04T12:31:30.699Z
Updated: 2024-08-02T06:48:07.878Z
Reserved: 2023-06-13T15:40:01.925Z
Link: CVE-2023-3221
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-09-04T13:15:32.853
Modified: 2023-09-08T14:12:14.190
Link: CVE-2023-3221
Redhat
No data.