CVE-2025-41716 — Unauthenticated User Enumeration via Missing Authentication
The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for c…
Published: 2025-09-24 · CVSS: 5.3 · CVSS 3.1
The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for critical function.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7