CVE-2025-30344
CVE-2025-30344
Título es
CVE-2025-30344
Vie, 21/03/2025 – 06:15
Tipo
CWE-208
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2025-30344
Descripción en
An issue was discovered in OpenSlides before 4.2.5. During login at the /system/auth/login/ endpoint, the system's response times differ depending on whether a user exists in the system. The timing discrepancy stems from the omitted hashing of the password (e.g., more than 100 milliseconds).
21/03/2025
21/03/2025
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Gravedad 3.1 (CVSS 3.1 Base Score)
5.30
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
MEDIUM
Enviar en el boletín
Off
