vantage6 vulnerable to username timing attack

Description

References

• vantage6/vantage6 security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-21671 · ADVISORY
• vantage6/vantage6 commit 389f416 · WEB
• pypa/advisory-database · WEB
• vantage6/vantage6 · PACKAGE
• pypi.org/project/vantage6-server · PACKAGE
• GitHub Advisory GHSA-45gq-q4xh-cp53 · ADVISORY

vantage6의 다른 취약점

• CVE-2026-73652높음 7.1vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission…
• CVE-2026-54533보통 6.9vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, malicious algorithms can potentially acce…
• CVE-2026-54445보통 6.9vantage6 is an open-source infrastructure for privacy preserving analysis. Versions prior to 5.0.0 provide an initial user with username `ro…
• CVE-2024-27928보통 5.9vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, if an attacker hacks into a vantage6 user…
• CVE-2024-24769낮음 2.1vantage6 is an open-source infrastructure for privacy preserving analysis. Prior to version 5.0.0, users can reset their MFA token via API r…