Back to Database
Status published
Low
CVE-2023-40182
silverware-io-issue-tracker server responds in a noticeably different amount of time depending if a given email address exists or not
Vulnerability Description
Silverware Games is a premium social network where people can play games online. When using the Recovery form, a noticeably different amount of time passes depending of whether the specified email address presents in our database or not. This has been fixed in version 1.3.7.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-40182
Credits & Attribution
No credits recorded in the NVD database.
References
More from mesosoi
View All →CVE-2023-40179
Silverware Games vulnerable to account enumeration via inconsistent responses
Medium
5.3
CVE-2023-29192
SilverwareGames.io users with access to the game upload panel are able to edit download links for games uploaded by other developers
Low
2.7
CVE-2022-36072
SilverwareGames.io used == for hashing instead of ===
Medium
5.9
CVE-2022-23543
HTML attributes when attaching a YouTube link to the post
Medium
6.3
Affected Vendor
mesosoi
View all reports →Affected Software
silverwaregames-io-issue-tracker
Vulnerable Versions:
< 1.3.7
Timeline
Official Publish:
August 25th, 2023
Last Modified:
September 30th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.