CVE-2025-31933
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 15, 2025
Updated: Apr 16, 2025
CWE ID 639
Summary
CVE-2025-31933 is a newly disclosed vulnerability that allows unauthenticated attackers to ascertain the existence of usernames in a target system. By querying a specific API, cybercriminals can obtain this information without requiring any credentials or authorization. This vulnerability poses a significant risk as it could aid attackers in targeted phishing or brute-force attacks against user accounts. Organizations are advised to apply relevant patches or mitigations promptly to mitigate this exposure.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cloud Applications