/Vulnerability Library

Usermin 2.100 - Username Enumeration

CVE-2024-44762
Verified

Description

Usermin version 2.100 and below is susceptible to username enumeration via the password change functionality. An attacker can determine valid usernames by analyzing the response messages from the password change endpoint.

Severity

Medium

CVSS Score

5.3

Exploit Probability

3%

Affected Product

usermin

Published Date

May 21, 2025

Template Author

ritikchaddha

CVE-2024-44762.yaml
5.3Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVE ID:
cve-2024-44762
CWE ID:
cwe-209

References

https://www.exploit-db.com/exploits/52254https://www.webmin.com/usermin.htmlhttps://senscybersecurity.nl/cve-2024-44762-explained/https://nvd.nist.gov/vuln/detail/CVE-2024-44762

Remediation Steps

Upgrade to the latest version of Usermin that addresses this vulnerability.