CVE-2024-48572

MEDIUM 5.3CVE-2024-48572 · Published 29/10/2024 · updated 17/06/2026

In short

CVE-2024-48572 is a MEDIUM (CVSS 5.3) vulnerability affecting aquilacms (aquila-cms).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aquilacms aquila-cms	`≤ 1.409.20`	No fix yet

Description

A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addresses via the "Add a user" feature. The vulnerability occurs due to insufficiently validated user input being processed as a regular expression, which is then matched against email addresses to find duplicate entries.

References

dos-m0nk3y/CVE · Third Party Advisory

More vulnerabilities in aquilacms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free