← Back to CVE List

CVE-2023-31286

Published: 2023-04-27T03:15Z
Last Modified: 2025-01-31T19:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the server response leaks the existence of users. If one tries to reset a password of a non-existent user, an error message indicates that this user does not exist. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt