OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gist.github.com/mdickopp/10e4a4ba3d7ded8315a1613ee7f2541e | Third Party Advisory |
Configurations
History
13 Jun 2025, 15:03
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Openslides
Openslides openslides |
|
| CPE | cpe:2.3:a:openslides:openslides:4.0.15:*:*:*:*:*:*:* | |
| References | () https://gist.github.com/mdickopp/10e4a4ba3d7ded8315a1613ee7f2541e - Third Party Advisory |
25 Sep 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-25 15:15
Updated : 2025-06-13 15:03
NVD link : CVE-2024-22893
Mitre link : CVE-2024-22893
JSON object : View
Products Affected
openslides
- openslides
CWE
No CWE.