CVE-2018-25350
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
userSpice 4.3.24 has a username enumeration vulnerability. An unauthenticated attacker can send POST requests to existingUsernameCheck.php and analyze responses to find existing accounts.
Risk Assessment
An attacker can gather a list of valid usernames, facilitating brute-force or phishing attacks against user accounts.
Recommendation
Update userSpice to the latest version. Consider adding response delay mechanisms or CAPTCHA to username-checking endpoints.
Original NVD description (English source)
userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existingUsernameCheck.php endpoint. Attackers can submit usernames and analyze response text for the 'taken' string to identify existing accounts in the system.