medium5.3
CVE-2024-34336
User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the serv…
Impact
User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ordat | Ordat.Erp | before 2.24.01 |