Gastromenum Web Panel
Monthly
Observable response discrepancy in GastroMenum Web Panel exposes account existence to unauthenticated remote attackers via differential server responses, enabling systematic account footprinting. All versions prior to 31.08.2026 of the web panel are affected. Reported by TR-CERT, this flaw (CWE-204) allows an attacker to distinguish valid from invalid accounts without any credentials, providing a reliable enumeration primitive for downstream attacks such as credential stuffing or targeted phishing. No public exploit code or CISA KEV listing identified at time of analysis.
Observable response discrepancy in GastroMenum Web Panel exposes account existence to unauthenticated remote attackers via differential server responses, enabling systematic account footprinting. All versions prior to 31.08.2026 of the web panel are affected. Reported by TR-CERT, this flaw (CWE-204) allows an attacker to distinguish valid from invalid accounts without any credentials, providing a reliable enumeration primitive for downstream attacks such as credential stuffing or targeted phishing. No public exploit code or CISA KEV listing identified at time of analysis.