backdrop_cms vulnerabilities

CVEs whose affected-version data names the backdrop_cms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2022-34530Medium· 5.3

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames.

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames.

▾ Sunlitbackdropcms · backdrop_cmsEPSS 0.60%via NVD

backdrop_cms vulnerabilities (CVEs) · VulnSea