CVE-2025-30344
An issue was discovered in OpenSlides before 4.2.5. During login at the /system/auth/login/ endpoint, the system's response times differ depending on whether a user exists in th…
Published: 2025-03-21 · CVSS: 5.3 · CVSS 3.1
An issue was discovered in OpenSlides before 4.2.5. During login at the /system/auth/login/ endpoint, the system's response times differ depending on whether a user exists in the system. The timing discrepancy stems from the omitted hashing of the password (e.g., more than 100 milliseconds).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7