CVE-2023-40182CWE-208

silverware-io-issue-tracker server responds in a noticeably different amount of time depending if a given email address exists or not

Low · published August 25, 2023

CVSS v3.1
3.7
EPSS
0%
Percentile
32.2
In the wild
Unconfirmed
What it is

Silverware Games is a premium social network where people can play games online. When using the Recovery form, a noticeably different amount of time passes depending of whether the specified email address presents in our database or not. This has been fixed in version 1.3.7.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00392 · 32.2th percentile
Weakness
CWE-208 · Observable Timing Discrepancy
Published
2023-08-25T00:36Z
EPSS history
Timeline
  • 25 AUG 00:36Z
    silverware-io-issue-tracker server responds in a noticeably different amount of time depending if a given email address exists or not
    cvelistv5