UpHeron
All vulnerabilities

Servers and applications

CVE-2022-34530

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames.

Severity
Medium 5.3
Published
1 Aug 2022
Last changed
9 Jul 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Backdrop CMSServers and applications · cpe:a:backdropcms:backdrop_cms
  • Every version up to 1.22.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-34530
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-34530