Servers and applications
GHSA-256q-hx8w-xcqx
User enumeration via timing attack on login and password reset forms
- Severity
- Medium 5.3
- Published
- 10 Apr 2025
- Last changed
- 10 Apr 2025
- Added to UpHeron
- 3 Nov 2026
- Fixed in
- 5.3.23
- Sources
- Project advisories (GitHub)
Affected software
| Software | Affected versions |
|---|---|
Silverstripe CMSServers and applications · github:silverstripe/silverstripe-framework |
|
References
- GitHub Advisory Database https://github.com/advisories/GHSA-256q-hx8w-xcqx
- github.com https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-256q-hx8w-xcqx