CVE-2022-44022

Description

PwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by leveraging response timings for authentication attempts.

Affected Platforms

Weakness Type

CWE-307

References

• https://cve.nstsec.com/cve-2022-44022
• https://github.com/pwndoc/pwndoc/issues/381
• https://cve.nstsec.com/cve-2022-44022
• https://github.com/pwndoc/pwndoc/issues/381