CVE-2022-25642

Obyte (formerly Byteball) Wallet before 3.4.1 allows XSS. A crafted chat message can lead to remote code execution.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-02-28

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Obyte (Obyte)

References

• https://github.com/byteball/obyte-gui-wallet/releases/tag/v3.4.1
• https://obyte.org/faq
• https://vuln.ryotak.me/advisories/64