Description
Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2.
Published: 2024-11-06
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-45831 Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2.
History

Sat, 12 Jul 2025 15:45:00 +0200

Type Values Removed Values Added
Metrics epss

{'score': 0.00079}

 epss

{'score': 0.00086}

Fri, 08 Nov 2024 22:00:00 +0100

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

Wed, 06 Nov 2024 17:15:00 +0100

Type Values Removed Values Added
First Time appeared Humhub
Humhub humhub
CPEs cpe:2.3:a:humhub:humhub:*:*:*:*:*:*:*:*
Vendors & Products Humhub
Humhub humhub
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 06 Nov 2024 12:30:00 +0100

Type Values Removed Values Added
Weaknesses CWE-204

Wed, 06 Nov 2024 11:45:00 +0100

Type Values Removed Values Added
Description Observable Response Discrepancy vulnerability in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2. Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2.
Weaknesses CWE-209

Wed, 06 Nov 2024 11:30:00 +0100

Type Values Removed Values Added
References

Wed, 06 Nov 2024 11:00:00 +0100

Type Values Removed Values Added
References

Wed, 06 Nov 2024 09:00:00 +0100

Type Values Removed Values Added
Description Observable Response Discrepancy vulnerability in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2.
Title User enumeration in HubHub
Weaknesses CWE-204
References
Metrics cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Humhub Humhub
cve-icon MITRE

Status: PUBLISHED

Assigner: VULSec

Published:

Updated: 2024-11-06T15:43:32.903Z

Reserved: 2024-11-05T11:26:11.182Z

Link: CVE-2024-52043

cve-icon Vulnrichment

Updated: 2024-11-06T15:43:26.611Z

cve-icon NVD

Status : Analyzed

Published: 2024-11-06T08:15:03.420

Modified: 2026-06-17T08:06:51.470

Link: CVE-2024-52043

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-209

    Generation of Error Message Containing Sensitive Information