CVE-2019-16992

2019-09-2923:52:58

mitre

www.cve.org

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.3%

JSON

The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user’s private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments to the user), which might be incompatible with a user’s personal position on the semantics of an attestation.