CVE-2023-30458 (medicine_tracker_system)

A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of the supplied password.

cve enumeration issue length login malicious medicine password response response time system tracker username username enumeration usernames valid