What’s Vulnerable › Vulnerabilities

CVE-2024-52043: User enumeration in HubHub

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-06 · updated 2026-06-17
• Weakness: CWE-209

Description

Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2.

Affected products

• humhub: through 1.16.2

References

• https://github.com/advisories/GHSA-3q4w-rf2j-fx5x
• https://https://github.com/humhub/humhub
• https://www.vulsec.org/advisories

Get alerted when CVE-2024-52043 or the next vulnerability affects your stack