Information Disclosure

2022-02-2410:38:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

46.9%

JSON

october/october is vulnerable to information disclosure. Remote unauthenticated attackers are able to exfiltrate user private keys via non-authoritative gateway servers because the library does not validate gateway server signatures.

CPENameOperatorVersion
october/octoberlev2.1.29
october/octoberlev1.0.474
october/octoberlev3.0.2
october/octoberlev1.1.10
october/octoberlev2.1.29
october/octoberlev1.0.474
october/octoberlev3.0.2
october/octoberlev1.1.10

Name	Operator	Version
october/october	le	v2.1.29
october/october	le	v1.0.474
october/october	le	v3.0.2
october/october	le	v1.1.10
october/october	le	v2.1.29
october/october	le	v1.0.474
october/october	le	v3.0.2
october/october	le	v1.1.10