CVE-2023-40182: silverware-io-issue-tracker server responds in a noticeably different amount of time depending if a given email address exists or not

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-25 · updated 2026-06-17
Weakness: CWE-208

Description

Silverware Games is a premium social network where people can play games online. When using the Recovery form, a noticeably different amount of time passes depending of whether the specified email address presents in our database or not. This has been fixed in version 1.3.7.

Affected products

mesosoi silverwaregames-io-issue-tracker: before 1.3.7 — fixed in 1.3.7

How to fix

Upgrade to a fixed version: mesosoi silverwaregames-io-issue-tracker 1.3.7. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-40182 or the next vulnerability affects your stack