Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Backdrop CMS 授权问题漏洞
Vulnerability Description
Backdrop CMS是一套开源的内容管理系统（CMS）。 Backdrop CMS v1.22.0版本存在授权问题漏洞，该漏洞源于登录和重置密码功能存在问题，允许攻击者通过密码重置请求和基于用户名返回的不同响应来枚举用户名。
CVSS Information
N/A
Vulnerability Type
N/A