CVE-2023-32691

CVE-2023-32691 is a medium-severity timing side-channel vulnerability affecting the gost (GO Simple Tunnel) project. It arises from the direct comparison of untrusted input from an HTTP header with a sensitive secret, allowing an attacker to deduce the secret through timing analysis. The vulnerability has a CVSS score of 5.9, indicating a network attack vector with high attack complexity and potential for high confidentiality impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.