Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-9031

Timing-Based Username Enumeration in DivvyDrive Information Technologies' DivvyDrive Web

Description

Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive Web allows Cross-Domain Search Timing. This issue affects DivvyDrive Web: from 4.8.2.2 before 4.8.2.15.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

DivvyDrive Information Technologies Inc. DivvyDrive Web

Default version status: unaffected

  • 4.8.2.2 to < 4.8.2.15affected

References