Skip to content
OpenAdvisories

Weakness (CWE)

CWE-208: Observable Timing Discrepancy

Base Incomplete

Two separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.

Source: MITRE CWE-208

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2025-68621 Public exploit

    Trilium Notes has a Timing Attack Vulnerability in /api/login/sync

    Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. Prior to 0.101.0, a critical timing attack vulnerability in Trilium's sync authentication endpoint allows unauthenticat…

    TriliumNext Trilium