Количество 2
Количество 2
CVE-2026-41161
Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.2.0, the /api/auth/login endpoint contains a logic flaw that allows unauthenticated remote attackers to enumerate valid usernames by measuring the application's response time. This issue has been patched in version 2.2.0.
GHSA-43fj-qp3h-hrh5
Sync-in Server has Username Enumeration via Timing Attack
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-41161 Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.2.0, the /api/auth/login endpoint contains a logic flaw that allows unauthenticated remote attackers to enumerate valid usernames by measuring the application's response time. This issue has been patched in version 2.2.0. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
| GHSA-43fj-qp3h-hrh5 Sync-in Server has Username Enumeration via Timing Attack | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу