Security Advisory
CVE-2019-16394
5.3
MEDIUM
Vulnerability Description
SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers.
Published Date
September 17, 2019
Official Source
NIST NVD Advisory