Vulnerabilities

TI-2022-13279 CVE-2022-31246 · GHSA-h899-2p3m-3gm2

paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a…

LOW 26

paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR code data).

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00832 Published 2022-06-17 No fix listed CWE-88

TI-2018-04675 CVE-2018-6353 · GHSA-xpr2-2m5m-75jw

The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary…

LOW 35

The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering attacks in which a user pastes code that they do not understand and (2) code pa…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00483 Published 2018-01-27 No fix listed CWE-78

Vulnerabilities

Filters

paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a…

The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary…