Vulnerabilities

TI-2022-13279 CVE-2022-31246 · GHSA-h899-2p3m-3gm2

paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a…

LOW 26

paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR code data).

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00832 Published 2022-06-17 No fix listed CWE-88

TI-2018-15682 CVE-2018-1000022 · GHSA-7hrg-9m3r-2cqv

Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5…

LOW 28

Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a Missing Authorization vulnerability in JSONRPC interface that can result in Bitcoin theft, if the user's wallet is not password…

CVSS 3.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0203 Published 2018-02-09 No fix listed CWE-862

TI-2018-04675 CVE-2018-6353 · GHSA-xpr2-2m5m-75jw

The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary…

LOW 35

The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering attacks in which a user pastes code that they do not understand and (2) code pa…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00483 Published 2018-01-27 No fix listed CWE-78

Vulnerabilities

Filters

paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a…

Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5…

The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary…