CVE-2023-40182

Summary

Silverware Games is a premium social network where people can play games online. When using the Recovery form, a noticeably different amount of time passes depending of whether the specified email address presents in our database or not. This has been fixed in version 1.3.7.

Affected Software

VendorProductVersion RangeStatus
mesosoisilverwaregames-io-issue-tracker< 1.3.7affected

Weaknesses

  • CWE-208: CWE-208: Observable Timing Discrepancy

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References