CVE-2026-122139
blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Reset
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
blueprintUE Self-Hosted Edition before 4.3.3 contains an account enumeration vulnerability in ForgotPasswordMiddleware.php that allows unauthenticated attackers to identify registered email addresses. Attackers can compare password reset redirect targets for submitted emails, and failed lookups are never rate-limited, enabling unlimited enumeration attempts.
| CWE | CWE-204 |
| Vendor | blueprintue |
| Product | blueprintue-self-hosted-edition |
| Published | Nov 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for blueprintue blueprintue-self-hosted-edition
Be the first to know when new medium vulnerabilities affecting blueprintue blueprintue-self-hosted-edition are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
blueprintue / blueprintue-self-hosted-edition
0 < 4.3.3
References
github.com: https://github.com/blueprintue/blueprintue-self-hosted-edition/security/advisories/GHSA-fwgq-c3c6-p67j github.com: https://github.com/blueprintue/blueprintue-self-hosted-edition/commit/45832742182a6c4438a0d58de95ba9c7686851f2 github.com: https://github.com/blueprintue/blueprintue-self-hosted-edition/pull/265 github.com: https://github.com/blueprintue/blueprintue-self-hosted-edition/releases/tag/v4.3.3 github.com: https://github.com/blueprintue/blueprintue-self-hosted-edition/blob/v4.3.2/app/middlewares/ForgotPasswordMiddleware.php#L130-L157 vulncheck.com: https://www.vulncheck.com/advisories/blueprintue-self-hosted-edition-before-4.3.3-account-enumeration-via-password-reset
Credits
Farhan Khan rancoud