| Package | Affected versions | Patched versions |
|---|---|---|
| spip | ≥ 3.2.0, < 3.2.5< 3.1.11 | 3.2.53.1.11 |
SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free