CVE-2023-30458

2023-04-2400:00:00

mitre

www.cve.org

cve-2023-30458

response time

invalid usernames

valid username

password length

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.9%

JSON

A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of the supplied password.