CVE-2023-40765

Summary

CVE-2023-40765 is a vulnerability affecting the PHPJabbers Event Booking Calendar v4.0. During password recovery, this issue permits attackers to perform user enumeration through subtle differences in messages returned. This functionality enables potential adversaries to distinguish valid users from non-existent ones, facilitating brute force attacks against valid accounts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.