EUVD-2022-35807

Malicious code in bioql PyPI...

CVE-2022-32741

The CVE-2022-32741 entry concerns OTRS (versions 7.x up to 7.0.35 and 8.x up to 8.0.23) where the Request New Password feature can leak valid usernames via response-time differences, enabling user enumeration. The root cause is timing-based information disclosure in the password-reset flow. The p...

CVE-2022-32741 Information disclosure in Request New Password feature

Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time...