Seo Panel · Seo Panel · CVE-2024-22647
**Name of the Vulnerable Software and Affected Versions**
SEO Panel version 4.10.0
**Description**
A user enumeration issue was found, occurring during user authentication. This issue allows an attacker to determine if a username is valid or not through differences in error messages, enabling a brute-force attack with valid usernames.
**Recommendations**
For SEO Panel version 4.10.0, consider temporarily restricting access to the user authentication module until a patch is available. As a mitigation measure, avoid using distinct error messages for valid and invalid usernames to prevent user enumeration. At the moment, there is no information about a newer version that contains a fix for this vulnerability.