CVE-2019-12743: Medium severity humhub social network kit vulnerability

Published Jul 29, 2019

Updated

HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones) by brute-forcing the username after the /u/ initial URI substring, aka Response Discrepancy Information Exposure.

Affected Software

1 affected component

Humhub Social Network Kit=1.3.13

Event History

Jul 29, 2019

CVE Published

via MITRE·03:23 PM

Data Sourced

via MITRE·03:23 PM

Description

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2019-12743.

What is the title of this vulnerability?

The title of this vulnerability is 'HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts exist…'

What is the severity of CVE-2019-12743?

The severity of CVE-2019-12743 is medium with a CVSS score of 5.3.

How does CVE-2019-12743 affect HumHub Social Network Kit Enterprise?

CVE-2019-12743 affects HumHub Social Network Kit Enterprise version 1.3.13.

How can remote attackers exploit CVE-2019-12743?

Remote attackers can exploit CVE-2019-12743 by brute-forcing the username after the /u/ initial URI substring to find user accounts on any Social Network Kits, including self-hosted ones.