CVE-2023-41646

Buttercup v2.20.3 is vulnerable: an attacker can obtain the master password hash by reading the vaults.json file. Root cause cited: exposure of vaults.json without proper protection. Impact per sources: potential leakage of master password hash (CVSS 3.1 base score 5.3, Confidentiality impact Low...