A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumerate valid user e-mail accounts.
Metrics
Affected Vendors & Products
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
Link | Providers |
---|---|
https://github.com/esoft-planner-cve/esoft_planner_cve |
![]() ![]() |
History
Wed, 01 Oct 2025 16:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Esoftplanner
Esoftplanner esoft Planner |
|
CPEs | cpe:2.3:a:esoftplanner:esoft_planner:3.24.08271-usa:*:*:*:*:*:*:* | |
Vendors & Products |
Esoftplanner
Esoftplanner esoft Planner |
Tue, 03 Dec 2024 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Esoft
Esoft planner |
|
Weaknesses | CWE-276 | |
CPEs | cpe:2.3:a:esoft:planner:*:*:*:*:*:*:*:* | |
Vendors & Products |
Esoft
Esoft planner |
|
Metrics |
cvssV3_1
|
Wed, 20 Nov 2024 20:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A discrepancy between responses for valid and invalid e-mail accounts in the Forgot your Login? module of eSoft Planner 3.24.08271-USA allows attackers to enumerate valid user e-mail accounts. | |
References |
|

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-12-03T15:41:41.223Z
Reserved: 2024-10-08T00:00:00
Link: CVE-2024-48533

Updated: 2024-12-03T15:41:35.663Z

Status : Analyzed
Published: 2024-11-20T21:15:07.487
Modified: 2025-10-01T15:45:30.393
Link: CVE-2024-48533

No data.

No data.