3 matches found
EUVD-2018-10957
Malware in sbrugna...
7.5CVSS7.6AI score0.01401EPSS
SaveExploits0References2
Information disclosure
The Stripe API v1 allows remote attackers to bypass intended access restrictions by replaying api.stripe.com /v1/tokens XMLHttpRequest data, parsing the response under the object card, and reading the cvccheck information if the creation is successful without charging the actual card used in the...
5CVSS7.5AI score0.01401EPSS
SaveExploits0References1Affected Software1
CVE-2018-19249
The Stripe API v1 allows remote attackers to bypass intended access restrictions by replaying api.stripe.com /v1/tokens XMLHttpRequest data, parsing the response under the object card, and reading the cvccheck information if the creation is successful without charging the actual card used in the...
7.5AI score0.01401EPSS
SaveExploits0References1
20