Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SilverStripe CMS 安全漏洞
Vulnerability Description
SilverStripe CMS是新西兰SilverStripe公司的一套开源的编程框架和内容管理系统 (CMS)。该系统具有支持多国语言、跨平台等特点。 SilverStripe CMS 3.5.5之前的版本和3.6.1之前的3.6.x版本中的登录和密码重置表单存在安全漏洞。远程攻击者可借助时序攻击利用该漏洞枚举用户。
CVSS Information
N/A
Vulnerability Type
N/A