Products
OpenSlides
- 4.0.15
Source
cve@mitre.org
Tags
CVE-2024-22893 details
Published : Sept. 25, 2024, 3:15 p.m.
Last Modified : Sept. 25, 2024, 3:15 p.m.
Last Modified : Sept. 25, 2024, 3:15 p.m.
Description
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
References
| URL | Source |
|---|---|
| https://gist.github.com/mdickopp/10e4a4ba3d7ded8315a1613ee7f2541e | cve@mitre.org |
This website uses the NVD API, but is not approved or certified by it.