Read the docs

ScratchVerifier

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ScratchVerifier records in CISA KEV

No ScratchVerifier vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Scratchverifier · all components

Priority LOW 35

In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00948 Published 2020-11-20 No fix listed CWE-287
Open these records in search →