Lucene search

K
osvGoogleOSV:USN-6753-1
HistoryApr 25, 2024 - 8:59 p.m.

cryptojs vulnerability

2024-04-2520:59:19
Google
osv.dev
4
cryptojs
vulnerability
insecure configuration
sensitive information
software} .

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.7%

Thomas Neil James Shadwell discovered that CryptoJS was using an insecure
cryptographic default configuration. A remote attacker could possibly use
this issue to expose sensitive information.

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.7%