疑似 0-day
Gerrit Code Review exposes the /accounts/ REST API endpoint which can be used to enumerate user accounts.The endpoint allows querying for accounts by username, email, or name, potentially revealing sensitive user information including account IDs, names, emails, and usernames without authentication.
id: gerrit-account-enum
info:
name: Gerrit Code Review - Account Enumeration
author: DhiyaneshD
...