Lucene search

K
cveMitreCVE-2023-50053
HistoryApr 30, 2024 - 7:15 p.m.

CVE-2023-50053

2024-04-3019:15:23
CWE-359
mitre
web.nvd.nist.gov
26
cve-2023-50053
foundation.app
remote attacker
sensitive information
authentication
nonce

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

9.0%

An issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Foundation, the signed message lacks a nonce (random number)

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

9.0%

Related for CVE-2023-50053