medium5.3
CVE-2023-0901
Pixelfed allows user enumeration via reset password functionality
Impact
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed 0.11.4 and prior.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | pixelfed/pixelfed | <= 0.11.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pixelfed | Pixelfed | before 0.11.4 |