Description

Authenticated users were able to enumerate other users' names via the learning plans page.

Remediation

References

CVE-2023-28334

Related Vulnerabilities

WebLogic Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-22965)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-4790)

WordPress Plugin Improved Product Options for WooCommerce Security Bypass (5.2.0)

WordPress Plugin WP Statistics SQL Injection (13.2.8)

WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.3)

Severity

Medium

Classification

CVE-2023-28334 CWE-639 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities