Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Piwigo Observable Response Discrepancy Vulnerability - CVE-2025-62512 - Vulnerability Database
Piwigo

Piwigo Observable Response Discrepancy Vulnerability - CVE-2025-62512

Medium
Reference: CVE-2025-62512
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-62512
Title: Piwigo Observable Response Discrepancy Vulnerability
Overview:

Piwigo is an open source photo gallery application for the web. In version 15.5.0 and likely earlier 15.x releases the password reset functionality in Piwigo allows an unauthenticated attacker to determine whether a given username or email address exists in the system. The endpoint at password.phpactionlost returns distinct messages for valid vs. invalid accounts enabling user enumeration. As of time of publication no known patches are available.