Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-9031 EUVD-2025-30952GHSA-xcmg-8x29-m9m4

Timing-Based Username Enumeration in DivvyDrive Information Technologies' DivvyDrive Web

Published Sep 24, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc. DivvyDrive Web allows Cross-Domain Search Timing.

This issue affects DivvyDrive Web: from 4.8.2.2 before 4.8.2.15.

Affected products

VendorProductAffectedFixed
DivvyDrive Information Technologies DivvyDrive Web 4.8.2.2 – < 4.8.2.15 4.8.2.15

References