CVE-2022-34530: Backdropcms Backdrop CMS

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames.

Affected products

• Backdropcms Backdrop CMS: up to and including 1.22.0

Published 2022-08-01. Last modified 2026-07-09.