Description

membership_tool.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to enumerate user account names via a crafted URL.

Remediation

References

CVE-2012-5497

Related Vulnerabilities

WordPress Plugin WP Plugin Info Card Unspecified Vulnerability (2.3.6)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10186)

WordPress Plugin Product Loops for WooCommerce-100+ Awesome styles and options for your WooCommerce products Security Bypass (1.6.1)

WordPress Plugin Cookie Information-Free GDPR Consent Solution Cross-Site Scripting (1.5.5)

Joomla Missing Authentication for Critical Function Vulnerability (CVE-2019-10946)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2012-5497