medium5.3
CVE-2025-62236
The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account.
Impact
The Frontier Airlines website has a publicly available endpoint that validates if an email addresses is associated with an account. An unauthenticated, remote attacker could determine valid email addresses, possibly aiding in further attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flyfrontier | Frontier Airlines | All versions |