admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2022/CVE-2022-3907.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

761 B
Raw Blame History

CVE-2022-3907

Description

The Clerk WordPress plugin before 4.0.0 is affected by time-based attacks in the validation function for all API requests due to the usage of comparison operators to verify API keys against the ones stored in the site options.

POC

Reference

Github

No PoCs found on GitHub currently.