Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSlides 安全漏洞
Vulnerability Description
OpenSlides是OpenSlides开源的一个免费的、基于网络的演示和集会系统。用于管理和投影集会的议程、动议和选举。 OpenSlides 4.0.15版本存在安全漏洞，该漏洞源于通过使用具有内容相关运行时的函数比较密码哈希来验证密码，允许攻击者使用定时攻击获取有关密码哈希的信息。
CVSS Information
N/A
Vulnerability Type
N/A