CVE-2019-25338
Medium · 5.3CVSS
5.3
EPSS
0.5%
Published
Feb 12, 2026
CISA due date
—
The record
DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-89173 Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive… CWE-204
- CVE-2026-9161 Observable response discrepancy vulnerability in DernekPlus Website Template allows… CWE-204
- CVE-2026-19205 Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows… CWE-204
- CVE-2026-19080 Observable response discrepancy vulnerability in Menulux Software Inc. CWE-204
- CVE-2026-78584 Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to… CWE-204
- CVE-2026-84307 Filament is a collection of full-stack components for accelerated Laravel development. CWE-204
- CVE-2026-66002 Frappe is a full-stack web application framework. CWE-204
- CVE-2026-54739 Lemmy is a link aggregator and forum for the fediverse. CWE-204