Beveiligingsadvies
CVE-2017-12849
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks.