CVE-2024-22893: Openslides

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack.

Affected products

• Openslides Openslides: version 4.0.15 only

Published 2024-09-25. Last modified 2026-06-17.