EPSS
Percentile
47.6%
Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request.
github.com/advisories/GHSA-8p2p-p8mg-x3cw
github.com/bitpay/insight-api
github.com/bitpay/insight-api/issues/542
nvd.nist.gov/vuln/detail/CVE-2018-1000023