Beveiligingsadvies

CVE-2024-47178

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-09-30 15:09:59

Laatst bijgewerkt 2024-09-30 16:01:32

Toegewezen door GitHub_M

CVSS-score 8.7

Status PUBLISHED

Beschrijving

basic-auth-connect is Connect's Basic Auth middleware in its own module. basic-auth-connect < 1.1.0 uses a timing-unsafe equality comparison that can leak timing information. This issue has been fixed in basic-auth-connect 1.1.0.

← Alle CVE's bekijken Bekijk op cve.org ↗