Description

An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.

Remediation

References

CVE-2022-48566

Related Vulnerabilities

WordPress Plugin Quiz Maker Multiple SQL Injection Vulnerabilities (6.2.0.8)

WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Scripting (4.3.9)

WordPress Plugin WP Mail Logging Multiple Unspecified Vulnerabilities (1.5.0)

WeBid Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-11592)

WordPress Plugin Display Widgets Spam Links Injection (2.6.3.1)

Severity

High

Classification

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-362 CVE-2022-48566