CVE-2024-52043 User enumeration in HubHub

What is CVE-2024-52043?

CVE-2024-52043 is a medium-severity vulnerability in HumHub, published on 6 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Generation of Error Message Containing Sensitive Information in HumHub GmbH & Co. KG - HumHub on Linux allows: Excavation (user enumeration).This issue affects all released HumHub versions: through 1.16.2.

Weakness: CWE-209

Which versions are affected by CVE-2024-52043?

It affects 1 product.

Products include Humhub Humhub.

How do I fix CVE-2024-52043?

No fix has been published for CVE-2024-52043 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-52043 being exploited?

There is no known exploitation of CVE-2024-52043 in the wild and no public exploit code.

Other vulnerabilities in HumHub

• CVE-2014-9528 SQL injection in n/a High 7.5
• CVE-2025-64442 HumHub is vulnerable to XSS through its Meta Search component High 7.1
• CVE-2026-29048 HumHub: XSS in Button component Medium 6.9
• CVE-2022-24865 Improper access control in humhub Medium 6.5
• CVE-2021-43847 Authorization Bypass in Space Invite in HumHub Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-3q4w-rf2j-fx5x.