CVE-2023-39343
Sulu Observable Response Discrepancy on Admin Login
概要
Sulu Observable Response Discrepancy on Admin Login
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Sulu is an open-source PHP content management system based on the Symfony framework. It allows over the Admin Login form to detect which user (username, email) exists and which one do not exist. Sulu Installation not using the old Symfony 5.4 security System and previous version are not impacted by this Security issue. The vulnerability has been patched in version 2.5.10.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com