CVE-2022-44022
PwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by leveraging response timings for authentication attempts.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
PwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by leveraging response timings for authentication attempts.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web cve.nstsec.com