CVE-2025-30344

creationtimestamp| type| source ---|---|--- 2025-03-21 06:21:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8317 2025-03-21 07:37:06+00:00| seen| https://t.me/cvedetector/20788 2025-03-21 09:18:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkuuyopdf...

CVE-2025-30344

An issue was discovered in OpenSlides before 4.2.5. During login at the /system/auth/login/ endpoint, the system's response times differ depending on whether a user exists in the system. The timing discrepancy stems from the omitted hashing of the password e.g., more than 100 milliseconds...

CVE-2025-30344

An issue was discovered in OpenSlides before 4.2.5. During login at the /system/auth/login/ endpoint, the system's response times differ depending on whether a user exists in the system. The timing discrepancy stems from the omitted hashing of the password e.g., more than 100 milliseconds...

CVE-2025-30344

An issue was discovered in OpenSlides before 4.2.5. During login at the /system/auth/login/ endpoint, the system's response times differ depending on whether a user exists in the system. The timing discrepancy stems from the omitted hashing of the password e.g., more than 100 milliseconds...