CVE-2023-3253

An improper authorization vulnerability exists where an authenticated,
low privileged remote attacker could view a list of all the users
available in the application.

Source: CVE-2023-3253