Flyspray : Security Vulnerabilities, CVEs, Published In 2008 (Information Leak)
Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to enumerate usernames.
Max CVSS
5.0
EPSS Score
0.33%
Published
2008-03-05
Updated
2018-10-11
1 vulnerabilities found