Advisory Database
  • Advisories
  • Dependency Scanning
  1. composer
  2. ›
  3. pterodactyl/panel
  4. ›
  5. GHSA-j7f5-gfqm-pcx3

GHSA-j7f5-gfqm-pcx3: Pterodactyl Panel: Client email change endpoint allows enumeration of accounts in system

June 26, 2026

An unprotected user enumeration vulnerability exists in the account email update endpoint, allowing authenticated users to verify whether email addresses are registered on the panel through automated requests without rate limiting or CAPTCHA protection.

References

  • github.com/advisories/GHSA-j7f5-gfqm-pcx3
  • github.com/pterodactyl/panel/security/advisories/GHSA-j7f5-gfqm-pcx3

Code Behaviors & Features

Detect and mitigate GHSA-j7f5-gfqm-pcx3 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 1.12.3

Fixed versions

  • 1.12.3

Solution

Upgrade to version 1.12.3 or above.

Impact 5.3 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Learn more about CVSS

Weakness

  • CWE-204: Observable Response Discrepancy

Source file

packagist/pterodactyl/panel/GHSA-j7f5-gfqm-pcx3.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sat, 18 Jul 2026 00:24:59 +0000.