medium5.3
CVE-2024-1145
User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier.
Impact
User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier. This vulnerability could allow a remote user to retrieve all valid users registered in the application just by looking at the request response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alma | Alma Blog | through 2.1.10 |