{"id":"CVE-2017-5537","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-5537","generatedAt":"2026-10-29T00:18:27.347Z","title":"The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests.","description":"The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests.","published":"2017-03-15T15:59:01.000Z","lastModified":"2026-06-17T01:20:42.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-200"],"affected":["weblate/weblate"],"epss":{"score":0.02306,"percentile":0.83255,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (2.31%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2017/01/18/11","tags":["Mailing List","Patch"],"source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2017/01/20/1","tags":["Mailing List","Patch"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/95676","tags":["Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"https://github.com/WeblateOrg/weblate/blob/weblate-2.10.1/docs/changes.rst","tags":["Patch","Release Notes"],"source":"cve@mitre.org"},{"url":"https://github.com/WeblateOrg/weblate/commit/abe0d2a29a1d8e896bfe829c8461bf8b391f1079","tags":["Patch"],"source":"cve@mitre.org"},{"url":"https://github.com/WeblateOrg/weblate/issues/1317","tags":["Issue Tracking","Patch"],"source":"cve@mitre.org"},{"url":"http://www.openwall.com/lists/oss-security/2017/01/18/11","tags":["Mailing List","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2017/01/20/1","tags":["Mailing List","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/95676","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/WeblateOrg/weblate/blob/weblate-2.10.1/docs/changes.rst","tags":["Patch","Release Notes"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/WeblateOrg/weblate/commit/abe0d2a29a1d8e896bfe829c8461bf8b391f1079","tags":["Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/WeblateOrg/weblate/issues/1317","tags":["Issue Tracking","Patch"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-5537","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}