CVE-2018-1000023

Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2018-02-09

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Insight-api (Insight.bitpay)

References

• https://github.com/bitpay/insight-api/issues/542