cve/2023/CVE-2023-49948.md
2024-05-25 21:48:12 +02:00

608 B

CVE-2023-49948

Description

Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension) to a URL.

POC

Reference

No PoCs from references.

Github