← CVE Intelligence

CVE-2025-9031

Timing-Based Username Enumeration in DivvyDrive Information Technologies' DivvyDrive Web PUBLISHED

Description (CNA)

Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive Web allows Cross-Domain Search Timing. This issue affects DivvyDrive Web: from 4.8.2.2 before 4.8.2.15.

Affected (CNA)

Vendor / productVersions
DivvyDrive Information Technologies Inc. / DivvyDrive Webaffected 4.8.2.2 before 4.8.2.15

CWE

CWE-208, CWE-203

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.