Executive brief
Pixelfed allows user enumeration via reset password functionality
Affected products
- Packagist pixelfed/pixelfed
Junglewise Threat Intelligence
CVE-2023-0901 · Severity: low · CVSS 3.1 · Published 2023-02-18
Technologies: pixelfed/pixelfed (Packagist). Vendors: Packagist.
Pixelfed allows user enumeration via reset password functionality