CVE-2018-17368

CVE-2018-17368 describes an information leakage vulnerability in PublicCMS V4.0.180825. This flaw allows attackers to differentiate between valid and invalid usernames during login attempts based on varying response lengths, facilitating more effective brute-force attacks. Rated as MEDIUM severity (CVSS 5.3), the vulnerability has a low impact on confidentiality, requires no user interaction, and can be exploited over the network with low attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.