CVE-2025-59716: Guests: hassas bilgi ifşası

Açıklama (NVD)

ownCloud Guests before 0.12.5 allows unauthenticated user enumeration via the /apps/guests/register/{email}/{token} endpoint. Because of insufficient validation of the supplied token in showPasswordForm, the server responds differently when an e-mail address corresponds to a valid pending guest user rather than a non-existent user.

Özet bilgiler

Ürün

Owncloud Guests

CVSS v3.1

5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

%0,95 (yüzdelik 61)

CWE

CWE-200

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• gist.github.com
• github.com
• marketplace.owncloud.com
• yeswehack.com
• CWE-200