cve/2023/CVE-2023-30458.md

CVE-2023-30458

Description

A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of the supplied password.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/d34dun1c02n/CVE-2023-30458
• https://github.com/nomi-sec/PoC-in-GitHub