This repository was archived by the owner on Jun 8, 2024. It is now read-only.
The server responds in a noticeably different amount of time depending if a given email address exists or not
Package
recovery.php
(SilverwareGames.io)
Affected versions
< 1.3.7
Patched versions
1.3.7
When using the Recovery form, a noticeably different amount of time passes depending of whether the specified email address presents in our database or not. This has been fixed in version 1.3.7.
See also: CVE-2023-40179