Critical
Low
Medium
CVE-2025-58586
Overview
For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.
Critical
Low
Medium
No items found.