📦 Openslides

OpenSlides versions before 4.2.29 have an authentication bypass vulnerability where users synced via external SAML identity providers can be logged into locally using their OpenSlides username and a t...

OpenSlides 4.0.15 uses a weak hashing algorithm to store user passwords, making them vulnerable to offline cracking attacks. This affects all OpenSlides 4.0.15 installations where user accounts exist....

This stored cross-site scripting (XSS) vulnerability in OpenSlides allows attackers to inject malicious JavaScript into meeting descriptions, notes, and agenda topics. When users hover over specially ...

This vulnerability allows attackers to determine whether specific usernames exist in OpenSlides systems by measuring response time differences during login attempts. The timing side-channel reveals us...