Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25338. PoCs published by Talha ŞEN.
AI-analyzed exploit summary This exploit demonstrates a username enumeration vulnerability in Dokuwiki 2018-04-22b by sending a POST request to the password reset endpoint. The response differs for valid and invalid usernames, allowing an attacker to enumerate users.
Description
DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.
Exploits (1)
This exploit demonstrates a username enumeration vulnerability in Dokuwiki 2018-04-22b by sending a POST request to the password reset endpoint. The response differs for valid and invalid usernames, allowing an attacker to enumerate users.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N