Username Enumeration Vulnerability in Backdrop CMS v1.22.0 Login and Password Reset Functionality

CVE-2022-34530 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames.

Learn more about our Cms Pen Testing.