CVE-2018-25350
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
userSpice 4.3.24 has a username enumeration vulnerability. An unauthenticated attacker can send POST requests to existingUsernameCheck.php and analyze responses to find existing accounts.
Risk Assessment
An attacker can gather a list of valid usernames, facilitating brute-force or phishing attacks against user accounts.
Recommendation
Update userSpice to the latest version. Consider adding response delay mechanisms or CAPTCHA to username-checking endpoints.
Other vulnerabilities in userSpice
See all- CVE-2026-48900Medium
An improper access check allowed low privileged users to edit the task types of existing scheduler tasks.
- CVE-2018-25349Medium
userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header, which execute when administrators visit the audit log page.
Original NVD description (English source)
userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existingUsernameCheck.php endpoint. Attackers can submit usernames and analyze response text for the 'taken' string to identify existing accounts in the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS