Vendors / Electrum Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Electrum records in CISA KEV No Electrum vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 35
The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering attacks in which a user pastes code that they do not understand and (2) code pa…
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00483 · Published 2018-01-27 · No fix listed CWE-78
Priority LOW 26
paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR code data).
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00832 · Published 2022-06-17 · No fix listed CWE-88
Open these records in search → All records by CVSS severity
Critical0 High1 Medium2 Low0 No CVSS0