Vulnerability Details CVE-2023-50475
An issue was discovered in bcoin-org bcoin version 2.2.0, allows remote attackers to obtain sensitive information via weak hashing algorithms in the component \vendor\faye-websocket.js.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.1%
CVSS Severity
CVSS v3 Score 9.1
Products affected by CVE-2023-50475
-
cpe:2.3:a:bcoin:bcoin:2.2.0