Skip to main content

Redcap CVE-2024-55374

MEDIUM
Observable Discrepancy (CWE-203)
2026-01-02 cve@mitre.org
Information Disclosure Redcap Vanderbilt
5.3
CVSS 3.1 · Vendor: mitre
Share

Severity by source

Vendor (mitre) PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Jan 02, 2026 - 15:15 nvd
MEDIUM 5.3

DescriptionCVE.org

REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts.

AnalysisAI

Redcap versions up to 14.3.13 contains a vulnerability that allows attackers to enumerate usernames due to an observable discrepancy between login attempts (CVSS 5.3).

Technical ContextAI

affects Redcap. REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Redcap

View all
CVE-2024-56311 HIGH POC
8.8 Dec 22

REDCap through 14.9.6 has a security flaw in the Notes section of calendar events, exposing users to a Cross-Site Reques
CVE-2024-56310 HIGH POC
8.8 Dec 22

REDCap through 14.9.6 has a security flaw in the Project Dashboards name, exposing users to a Cross-Site Request Forgery
CVE-2019-14937 HIGH POC
7.5 Aug 17

REDCap before 9.3.0 allows time-based SQL injection in the edit calendar event via the cal_id parameter, such as cal_id=
CVE-2013-4611 CRITICAL
10.0 Jun 17

Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors
CVE-2024-45527 MEDIUM POC
6.1 Sep 02

REDCap 14.7.0 allows HTML injection via the project title of a New Project action. Rated medium severity (CVSS 6.1), thi
CVE-2022-42715 MEDIUM POC
6.1 Oct 12

A reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications upload feature. Rated mediu
CVE-2013-4610 CRITICAL
10.0 Jun 17

Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap before 5.0.3 and 5.1.x before 5.1.2 h
CVE-2023-37798 MEDIUM POC
5.4 Sep 07

A stored cross-site scripting (XSS) vulnerability in the new REDCap project creation function of Vanderbilt REDCap 13.1.
CVE-2024-37396 MEDIUM POC
5.4 Jun 10

A stored cross-site scripting (XSS) vulnerability in the Calendar function of REDCap 13.1.9 allows authenticated users t
CVE-2024-37394 MEDIUM POC
5.4 Jun 10

A stored cross-site scripting (XSS) vulnerability in the Project Dashboards of REDCap 13.1.9 allows authenticated users

CVE-2024-37395 MEDIUM POC
5.4 Jun 10

A stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated us
CVE-2024-56314 MEDIUM POC
5.4 Dec 22

A stored cross-site scripting (XSS) vulnerability in the Project name of REDCap through 14.9.6 allows authenticated user

Same weakness CWE-203 – Observable Discrepancy

View all
CVE-2017-5753 MEDIUM POC
5.6
CVE-2017-13099 HIGH POC
7.5
CVE-2017-1000385 MEDIUM POC
5.9
CVE-2017-6168 HIGH POC
7.4
CVE-2017-13098 HIGH POC
7.5
CVE-2017-17427 MEDIUM POC
5.9
CVE-2018-3639 MEDIUM POC
5.5
CVE-2019-25337 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2024-55374 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy