Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-39343

Sulu Observable Response Discrepancy on Admin Login

Description

Sulu is an open-source PHP content management system based on the Symfony framework. It allows over the Admin Login form to detect which user (username, email) exists and which one do not exist. Sulu Installation not using the old Symfony 5.4 security System and previous version are not impacted by this Security issue. The vulnerability has been patched in version 2.5.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

sulu sulu

  • >= 2.5.0, < 2.5.10affected

References