DivvyDrive Web Observable Timing Discrepancy Vulnerability Allowing Cross-Domain Search Timing

A timing discrepancy vulnerability has been identified in DivvyDrive Web, specifically in versions 4.8.2.2 prior to 4.8.2.15. This vulnerability allows for cross-domain search timing attacks, where an attacker could potentially exploit the timing of responses to infer information across different domains.

Impact

Exploitation of this vulnerability could enable cross-domain search timing attacks, allowing attackers to infer information based on the timing of responses.

Remediation

Users are advised to upgrade to version 4.8.2.15 or later.