CVE-2019-12743

MEDIUM 5.3CVE-2019-12743 · Published 29/07/2019 · updated 17/06/2026

In short

CVE-2019-12743 is a MEDIUM (CVSS 5.3) vulnerability affecting social network kit (humhub).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
social network kit humhub	`= 1.3.13`	No fix yet

Description

HumHub Social Network Kit Enterprise v1.3.13 allows remote attackers to find the user accounts existing on any Social Network Kits (including self-hosted ones) by brute-forcing the username after the /u/ initial URI substring, aka Response Discrepancy Information Exposure.

References

chanpu9/CVE · Third Party Advisory
humhub.org/en/news · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free