Actions
SoftPos #8
openEmail enumeration using forget password
Start date:
02/18/2024
Due date:
% Done:
100%
Estimated time:
Description
Description
The forget password feature is vulnerable to email enumeration, allowing an unauthenticated user to
get all email addresses registered on the system. The reason that this vulnerability exist is because
the server response when an email is not registered is different for when an email is registered.
Actions