What is CVE-2023-53943?

CVE-2023-53943 is a medium-severity vulnerability in Glpi-Project Glpi, classified under Observable Discrepancy. CVSS score: 5.3/10. Published 2025-12-18.

How severe is CVE-2023-53943?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Glpi-Project Glpi

CVE-2023-53943

GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identify valid user accounts.

EPSS: 0.003 (23.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Glpi-project Glpi — versions 9.5.7

Weakness classification (CWE)

CWE-203 — Observable Discrepancy

References

disclosure@vulncheck.com (Exploit, Third Party Advisory, exploit)
disclosure@vulncheck.com (Product, product)
disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2023-53943?: CVE-2023-53943 is a medium-severity vulnerability in Glpi-Project Glpi, classified under Observable Discrepancy. CVSS score: 5.3/10. Published 2025-12-18.
How severe is CVE-2023-53943?: Medium severity. CVSS v3 base score is 5.3 out of 10.