Lucene search

K
osvGoogleOSV:GHSA-8P2P-P8MG-X3CW
HistoryMar 05, 2018 - 7:33 p.m.

Insight API transaction broadcast endpoint can result in Full Path Disclosure

2018-03-0519:33:54
Google
osv.dev
5

EPSS

0.001

Percentile

47.6%

Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request.

EPSS

0.001

Percentile

47.6%

Related for OSV:GHSA-8P2P-P8MG-X3CW