Lucene search
HistoryApr 30, 2024 - 7:15 p.m.
CVE-2023-50053
vulnerability
foundation.app
platform
remote attacker
sensitive information
web3 authentication
signed message
nonce
CVSS3
7.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
AI Score
6.3
Confidence
Low
EPSS
0
Percentile
9.0%
An issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Foundation, the signed message lacks a nonce (random number)
References
Related
cve
cve
CVE-2023-50053
2024-04-30 19:15:23
cvelist
cvelist
CVE-2023-50053
2024-04-30 00:00:00
vulnrichment
vulnrichment
CVE-2023-50053
2024-04-30 00:00:00
CVSS3
7.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
AI Score
6.3
Confidence
Low
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2023-50053