What is CVE-2019-25338?

CVE-2019-25338 is a medium-severity vulnerability in Dokuwiki, classified under Observable Response Discrepancy. CVSS score: 5.3/10. Published 2026-02-12.

How severe is CVE-2019-25338?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Dokuwiki

CVE-2019-25338

DokuWiki 2018-04-22b contains a username enumeration vulnerability in its password reset functionality that allows attackers to identify valid user accounts. Attackers can submit different usernames to the password reset endpoint and distinguish between existing and non-existing accounts by analyzing the server's error response messages.

EPSS: 0.004 (33.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Dokuwiki — versions 2018-04-22b "Greebo", 2018-04-22b

Weakness classification (CWE)

CWE-204 — Observable Response Discrepancy

References

disclosure@vulncheck.com (Exploit, VDB Entry, exploit)
disclosure@vulncheck.com (Product, product)
disclosure@vulncheck.com (Product, product)
disclosure@vulncheck.com (Broken Link, third-party-advisory)

Frequently asked questions

What is CVE-2019-25338?: CVE-2019-25338 is a medium-severity vulnerability in Dokuwiki, classified under Observable Response Discrepancy. CVSS score: 5.3/10. Published 2026-02-12.
How severe is CVE-2019-25338?: Medium severity. CVSS v3 base score is 5.3 out of 10.