CVE-2020-28208

Medium

An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.9.1.

mitre·CWE-203·Published 2021-01-08

CVSS

5.3

EPSS

0.10

KEV

No

Exploits

0

cve.orgen

110 chars

An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.9.1.

NVDen

110 chars

An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.9.1.

NVDes

148 chars

Se presenta una vulnerabilidad de enumeración de direcciones de correo electrónico en la función password reset de Rocket.Chat versiones hasta 3.9.1

2

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N