CVE-2023-1538: Observable Timing Discrepancy

March 21, 2023

Observable Timing Discrepancy in GitHub repository answerdev/answer prior to 1.0.6.

References

github.com/advisories/GHSA-rvjp-8qj4-8p29
github.com/answerdev/answer/commit/813ad0b9894673b1bdd489a2e9ab60a44fe990af
huntr.dev/bounties/ac0271eb-660f-4966-8b57-4bc660a9a1a0
nvd.nist.gov/vuln/detail/CVE-2023-1538

Code Behaviors & Features

Detect and mitigate CVE-2023-1538 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →