2 matches found
RUSTSEC-2022-0018 Timing attack
Affecting versions did not compare tokens in constant time, which could make it possible for an attacker to guess the 2fa token of a user. This has been fixed by using using the crate constanttimeeq for comparison...
4.2CVSS4.3AI score0.0085EPSS
SaveExploits0References3
Timing attack
Affecting versions did not compare tokens in constant time, which could make it possible for an attacker to guess the 2fa token of a user. This has been fixed by using using the crate constanttimeeq for comparison...
4.4CVSS4.8AI score0.0085EPSS
SaveExploits0Affected Software1
20