CVE-2023-40758

50th percentile - higher than 50% of all known CVEs

User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.

The organization may be exposed to brute force attacks, potentially leading to user account takeover. This could result in data loss or unauthorized access to systems.

It is recommended to implement uniform messages during the password recovery process to minimize the risk of user enumeration. Additionally, consider implementing mechanisms to protect against brute force attacks.