Information Disclosure

2020-06-1603:34:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

51.4%

JSON

ssb-db and ssb-server are vulnerable to information disclosure. A flaw in the get method leads to a decryption of any messages it can decrypt and returning of decrypted sensitive data by default instead of only decrypting when asked.

CPENameOperatorVersion
ssb-dbeq20.0.0

CPE	Name	Operator	Version
	ssb-db	eq	20.0.0

References

github.com/advisories/GHSA-mpgr-2cx9-327h

github.com/ssbc/ssb-db/commit/43334d0871c9cc6220e0f6d6338499060f7761d4

github.com/ssbc/ssb-db/security/advisories/GHSA-mpgr-2cx9-327h

0.002 Low

EPSS

Percentile

51.4%

JSON

Related for VERACODE:25687