PT-2023-24617 · Briar · Briar

Name of the Vulnerable Software and Affected Versions: Briar versions 1.5.3 and earlier Description: The Introduction Client in Briar does not implement out-of-band verification for the public keys of introducees. This allows an introducer to launch man-in-the-middle attacks against later private...