GHSA-j7f5-gfqm-pcx3: Pterodactyl Panel: Client email change endpoint allows enumeration of accounts in system
An unprotected user enumeration vulnerability exists in the account email update endpoint, allowing authenticated users to verify whether email addresses are registered on the panel through automated requests without rate limiting or CAPTCHA protection.
References
Code Behaviors & Features
Detect and mitigate GHSA-j7f5-gfqm-pcx3 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →