CVE-2024-22893
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the passw…
Published: 2024-09-25 · CVSS: 7.5 · CVSS 3.1
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7