Unrated severityNVD Advisory· Published Feb 12, 2026· Updated Mar 5, 2026
Dokuwiki 2018-04-22b - Username Enumeration
CVE-2019-25338
Description
DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.exploit-db.com/exploits/47731mitreexploit
- www.vulncheck.com/advisories/dokuwiki-b-username-enumerationmitrethird-party-advisory
- download.dokuwiki.orgmitreproduct
- www.dokuwiki.org/dokuwikimitreproduct
News mentions
0No linked articles in our index yet.