Vulnerabilities

TI-2013-03585 CVE-2013-4106 · GHSA-w6ww-rjpp-j73g

A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.

LOW 30

A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01473 Published 2019-11-14 Fixed in 2.0.22 CWE-79

TI-2013-03587 CVE-2013-4108 · GHSA-2mch-v567-5x6m

Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.

MEDIUM 45

Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01543 Published 2019-11-14 No fix listed

TI-2013-03588 CVE-2013-4109 · GHSA-h4g6-fp5c-pvq3

An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.

LOW 31

An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01708 Published 2019-11-14 No fix listed CWE-79

TI-2013-03589 CVE-2013-4110 · GHSA-74x8-g586-9p62

Cryptocat has an Unspecified Chat Participant User List Disclosure

LOW 28

Cryptocat has an Unspecified Chat Participant User List Disclosure

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01997 Published 2019-11-05 No fix listed CWE-200

TI-2013-03586 CVE-2013-4107 · GHSA-398f-443h-w6mr

Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting

LOW 29

Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0111 Published 2019-11-05 Fixed in 2.0.22 CWE-79

TI-2013-02017 CVE-2013-2257 · GHSA-73cp-4xf9-c6m3

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness

LOW 37

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01958 Published 2019-11-04 Fixed in 2.0.42 CWE-307

TI-2013-02018 CVE-2013-2258 · GHSA-398m-f4ch-cf26

Cryptocat before 2.0.22 has Nickname User Impersonation

LOW 27

Cryptocat before 2.0.22 has Nickname User Impersonation

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0136 Published 2019-11-04 Fixed in 2.0.22

TI-2013-02019 CVE-2013-2259 · GHSA-q4qw-x527-p424

Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview

MEDIUM 48

Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03669 Published 2019-11-04 Fixed in 2.0.22 CWE-20

TI-2013-03584 CVE-2013-4105 · GHSA-4h2q-98g9-w94x

Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure

LOW 35

Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01126 Published 2019-11-04 Fixed in 2.0.22 CWE-200

TI-2013-02020 CVE-2013-2260 · GHSA-33hf-j99j-jxg5

Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness

MEDIUM 46

Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02162 Published 2019-11-04 Fixed in 2.0.22 CWE-331

TI-2013-02022 CVE-2013-2262 · GHSA-hv53-36jg-cxc4

Cryptocat strophe.js before 2.0.22 has information disclosure

LOW 37

Cryptocat strophe.js before 2.0.22 has information disclosure

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01926 Published 2019-11-04 Fixed in 2.0.22 CWE-200

TI-2013-02021 CVE-2013-2261 · GHSA-2f29-j8f8-fmjg

Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure

MEDIUM 46

Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.11553 Published 2019-11-04 Fixed in 2.0.22 CWE-200

TI-2013-03583 CVE-2013-4104 · GHSA-56v7-v35x-736f

Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol

LOW 34

Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00761 Published 2019-11-04 Fixed in 2.0.22 CWE-326

TI-2013-03579 CVE-2013-4100 · GHSA-r75p-3r7g-wv56

Cryptocat before 2.0.22 has Remote Denial of Service via username

LOW 37

Cryptocat before 2.0.22 has Remote Denial of Service via username

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02357 Published 2019-11-04 Fixed in 2.0.22 CWE-20

TI-2013-03580 CVE-2013-4101 · GHSA-p5r7-2gf5-p5mq

Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness

LOW 27

Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0136 Published 2019-11-04 Fixed in 2.0.22 CWE-20

TI-2013-03581 CVE-2013-4102 · GHSA-jvj5-m3q2-46qm

Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness

MEDIUM 43

Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0197 Published 2019-11-04 Fixed in 2.0.22 CWE-330

TI-2013-03582 CVE-2013-4103 · GHSA-rc86-mhm5-qh6p

Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input

MEDIUM 52

Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0687 Published 2019-11-04 Fixed in 2.0.22 CWE-20

Vulnerabilities

Filters