CVE-2023-3897 PoC — Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page

Source

https://github.com/jFriedli/CVE-2023-3897

Associated Vulnerability

Title:Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page (CVE-2023-3897)
Description:Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version

Readme

# CVE-2023-3897
Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. <br /> <br />
This issue affects SureMDM On-premise: 6.31 and below version 

- https://nvd.nist.gov/vuln/detail/CVE-2023-3897
- https://www.42gears.com/trust-center/information-security/security-advisories/42g-2023-003/
- https://www.exploit-db.com/exploits/51804

```
searchsploit -x multiple/webapps/51804.txt
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →