Medium severity5.3NVD Advisory· Published Jun 24, 2020· Updated Jun 17, 2026
CVE-2020-14016
CVE-2020-14016
Description
An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account. However, the feature returns a not_found message when the provided username or email address does not match a user in the system. This can be used to enumerate users.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Navigate CMS/Navigate CMSdescription
- Range: = 2.9 r1433
Patches
Vulnerability mechanics
References
2- blog.sean-wright.com/navigate-cms/nvdExploitThird Party Advisory
- cwe.mitre.org/data/definitions/204.htmlnvd
News mentions
0No linked articles in our index yet.