CVE-2024-28232: Username Enumeration Distinct Errorscve-2024-28232-username-enumeration-distinct-errors
Authentication endpoint returns different error messages depending on whether the user exists or the password is incorrect. This discrepancy allows attackers to enumerate valid usernames. To fix, return a generic error instead.
