Read the docs

shrinerb

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

shrinerb records in CISA KEV

No shrinerb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Shrine 1 record LOW

Records

1 record in Shrine · all components

TI-2020-12009 CVE-2020-15237 · GHSA-5jjv-x4fq-qjwp

Timing attack in Shrine

Priority LOW 28

In Shrine before version 3.3.0, when using the `derivation_endpoint` plugin, it's possible for the attacker to use a timing attack to guess the signature of the derivation URL.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01015 Published 2020-10-05 Fixed in 3.3.0 CWE-203
Open these records in search →