Frontier Airlines
Monthly
Email enumeration in the Frontier Airlines website allows unauthenticated remote attackers to determine whether a given email address is associated with a Frontier account. This information disclosure (CWE-204) has a low confidentiality impact and no public exploit identified at time of analysis; the CVSS 4.0 base score is 6.9, but the real-world risk is low-to-moderate because exploitation is confined to the hosted service and value depends on chaining harvested addresses into phishing or credential stuffing.
Email enumeration in the Frontier Airlines website allows unauthenticated remote attackers to determine whether a given email address is associated with a Frontier account. This information disclosure (CWE-204) has a low confidentiality impact and no public exploit identified at time of analysis; the CVSS 4.0 base score is 6.9, but the real-world risk is low-to-moderate because exploitation is confined to the hosted service and value depends on chaining harvested addresses into phishing or credential stuffing.