CWE-203 通过差异性导致的信息暴露 类弱点 146 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-203 属于可观察差异漏洞，指产品在不同情境下表现出可被未授权方察觉的差异行为或响应。攻击者常利用此特性进行侧信道分析，通过对比响应时间、错误信息或状态码，推断系统内部逻辑、验证用户身份或探测敏感数据。开发者应避免暴露细微差异，确保对合法与非法请求返回一致的错误提示和响应格式，并统一处理逻辑，从而消除可用于信息泄露的观测线索。
my $username=param('username'); my $password=param('password'); if (IsValidUsername($username) == 1) { if (IsValidPassword($username, $password) == 1) { print "Login Successful"; } else { print "Login Failed - incorrect password"; } } else { print "Login Failed - unknown username"; }"Login Failed - incorrect username or password"def validate_password(actual_pw, typed_pw): if len(actual_pw) <> len(typed_pw): return 0 for i in len(actual_pw): if actual_pw[i] <> typed_pw[i]: return 0 return 1| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-47057 | Mautic 安全漏洞 — Mautic | 5.3 | Medium | 2025-05-28 |
| CVE-2025-46804 | GNU Screen 安全漏洞 | 3.3 | Low | 2025-05-26 |
| CVE-2025-23182 | UBtech Freepass 安全漏洞 — Freepass | 4.3 | Medium | 2025-05-22 |
| CVE-2025-46720 | Keystone 安全漏洞 — keystone | 3.1 | Low | 2025-05-05 |
| CVE-2021-47664 | Franka Emika Robot 安全漏洞 — Franka Emika Robot | 5.3 | Medium | 2025-04-24 |
| CVE-2024-11084 | Perforce ALM 安全漏洞 — Helix ALM | 5.3AI | MediumAI | 2025-04-15 |
| CVE-2025-0361 | AXIS OS 安全漏洞 — AXIS OS | 4.3 | Medium | 2025-04-08 |
| CVE-2025-31124 | ZITADEL 安全漏洞 — zitadel | 5.3 | Medium | 2025-03-31 |
| CVE-2024-51477 | IBM InfoSphere Information Server 安全漏洞 — InfoSphere Information Server | 4.3 | Medium | 2025-03-28 |
| CVE-2025-1468 | CODESYS Runtime Toolkit 安全漏洞 — CODESYS Runtime Toolkit | 7.5 | High | 2025-03-18 |
| CVE-2025-29780 | Post-Quantum Secure Feldman Verifiable Secret Sharing 安全漏洞 — PostQuantum-Feldman-VSS | 5.3 | - | 2025-03-14 |
| CVE-2024-41760 | IBM Common Cryptographic Architecture 安全漏洞 — Common Cryptographic Architecture | 3.7 | Low | 2025-03-11 |
| CVE-2023-37482 | Siemens SIMATIC S7-1200和SIMATIC S7-1500 安全漏洞 — SIMATIC Drive Controller CPU 1504D TF | 5.3 | Medium | 2025-02-11 |
| CVE-2024-45089 | IBM Sterling B2B Integrator 安全漏洞 — Sterling B2B Integrator | 4.3 | Medium | 2025-01-31 |
| CVE-2025-21336 | Microsoft Windows Cryptographic Services 安全漏洞 — Windows 10 Version 1507 | 5.6 | Medium | 2025-01-14 |
| CVE-2024-54002 | Dependency-Track 安全漏洞 — dependency-track | 5.3 | Medium | 2024-12-04 |
| CVE-2020-26062 | Cisco?Integrated Management Controller 安全漏洞 — Cisco Unified Computing System (Managed) | 5.3 | Medium | 2024-11-18 |
| CVE-2024-49358 | ZimaOS 安全漏洞 — ZimaOS | 5.3 | Medium | 2024-10-24 |
| CVE-2024-47869 | Gradio 安全漏洞 — gradio | 5.9AI | MediumAI | 2024-10-10 |
| CVE-2024-43546 | Microsoft Windows Cryptographic Services 安全漏洞 — Windows 10 Version 21H2 | 5.6 | Medium | 2024-10-08 |
| CVE-2024-9513 | NetAdmin IAM 安全漏洞 — NetAdmin IAM | 3.7 | Low | 2024-10-04 |
| CVE-2024-1544 | wolfSSL 安全漏洞 — wolfSSL | 4.1 | Medium | 2024-08-27 |
| CVE-2024-41952 | ZITADEL 安全漏洞 — zitadel | 5.3 | Medium | 2024-07-31 |
| CVE-2024-31878 | IBM i 代码问题漏洞 — i | 5.3 | Medium | 2024-06-07 |
| CVE-2024-5124 | ChuanhuChatGPT 信息泄露漏洞 — gaizhenbiao/chuanhuchatgpt | 7.4AI | HighAI | 2024-06-06 |
| CVE-2024-30257 | 1Panel 安全漏洞 — 1Panel | 3.9 | Low | 2024-04-18 |
| CVE-2024-2464 | CDeX 安全漏洞 — CDeX | 5.3AI | MediumAI | 2024-03-21 |
| CVE-2024-0436 | AnythingLLM 安全漏洞 — mintplex-labs/anything-llm | 6.7 | - | 2024-02-25 |
| CVE-2024-26268 | Liferay Portal和Liferay DXP 安全漏洞 — Portal | 5.3 | Medium | 2024-02-20 |
| CVE-2023-6935 | wolfSSL 安全漏洞 — wolfSSL | 5.9 | Medium | 2024-02-09 |
CWE-203（通过差异性导致的信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 146 条 CVE 漏洞。