Timing Attack

🗓️ 17 Mar 2023 00:51:02Reported by Veracode Vulnerability DatabaseType

Timing attack vulnerability in ezsystems and ibexa/core

Reporter	Title	Published	Views	Family All 12
CNNVD	Ez Systems eZ Platform 竞争条件问题漏洞	12 Mar 202300:00	–	cnnvd
CVE	CVE-2022-48366	12 Mar 202300:00	–	cve
Cvelist	CVE-2022-48366	12 Mar 202300:00	–	cvelist
EUVD	EUVD-2023-0895	3 Oct 202520:07	–	euvd
Github Security Blog	Timing attack in eZ Platform Ibexa	12 Mar 202306:30	–	github
NVD	CVE-2022-48366	12 Mar 202305:15	–	nvd
OSV	GHSA-342C-VCFF-2FF2 Login timing attack in ezsystems/ezplatform-kernel	2 Jun 202220:53	–	osv
OSV	GHSA-66M4-GC8H-HPJX Timing attack in eZ Platform Ibexa	12 Mar 202306:30	–	osv
OSV	GHSA-XFQG-P48G-HH94 Login timing attack in ezsystems/ezpublish-kernel	2 Jun 202221:02	–	osv
Prion	Code injection	12 Mar 202305:15	–	prion

Vulners

Node

intel ibexa/coreRangev4.0.0-beta1–4.0.0-beta1php

intel ibexa/coreRangev4.1.0-beta1–4.1.0-beta1php

Source	Link
developers	www.developers.ibexa.co/security-advisories/ibexa-sa-2022-006-vulnerabilities-in-page-builder-login-and-commerce
github	www.github.com/ezsystems/ezplatform-kernel/commit/09d3ee4c36ce22f75d5ec3f22edf3d74eb158211
github	www.github.com/ezsystems/ezpublish-kernel/commit/913fe17281536a91437d94e8267181ae8b57f5d5
github	www.github.com/advisories/GHSA-66m4-gc8h-hpjx
github	www.github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-342c-vcff-2ff2
github	www.github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-xfqg-p48g-hh94
github	www.github.com/ibexa/core/commit/bdc3b83501da13c9f8d1754e4bb531a976dc18e2
github	www.github.com/ibexa/core/commit/ba1ca5aaa50e0eb023d9d52bd273ef1680cc840c

14 Nov 2023 20:20Current

4.7Medium risk

Vulners AI Score4.7

CVSS 3.13.7

EPSS0.00458

SSVC