User Enumeration Vulnerability in Mobatime Mobile Application (CVE-2023-3065 and 3066)

CVE-2023-3064 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Anonymous user may get the list of existing users managed by the application, that could ease further attacks (see CVE-2023-3065 and 3066)This issue affects Mobatime mobile application AMXGT100 through 1.3.20.

Learn more about our Mobile App Penetration Testing.