Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CasaOS Username Enumeration
Vulnerability Description
CasaOS-UserService provides user management functionalities to CasaOS. Starting in version 0.4.4.3 and prior to version 0.4.7, the Casa OS Login page disclosed the username enumeration vulnerability in the login page. An attacker can enumerate the CasaOS username using the application response. If the username is incorrect application gives the error `**User does not exist**`. If the password is incorrect application gives the error `**Invalid password**`. Version 0.4.7 fixes this issue.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
响应差异性信息暴露
Vulnerability Title
CasaOS 安全漏洞
Vulnerability Description
CasaOS是一个简单、易用、优雅的开源家庭云系统。 CasaOS-UserService 0.4.4.3至0.4.7之前版本存在安全漏洞，该漏洞源于Login页面存在户名枚举漏洞。
CVSS Information
N/A
Vulnerability Type
N/A