CVE-2018-1000549

CVE-2018-1000549 describes an email and username enumeration vulnerability in Wekan version 1.04.0. This flaw allows an unauthenticated remote attacker to use the "Register" and "Forgot your password?" pages to conduct brute-force attacks, thereby identifying valid usernames and email addresses. The vulnerability has a CVSSv3 score of 5.3 (Medium), indicating a low attack complexity with no user interaction required, and primarily impacts confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.