Description
Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request.
Remediation
References
https://github.com/bitpay/insight-api/issues/542
Related Vulnerabilities
CVE-2020-5229 Vulnerability in maven package org.opencastproject:opencast-common-jpa-impl
CVE-2020-7784 Vulnerability in npm package ts-process-promises
CVE-2022-37223 Vulnerability in maven package com.jflyfox:jflyfox_jfinal
CVE-2019-5427 Vulnerability in maven package c3p0:c3p0
CVE-2016-10735 Vulnerability in maven package org.webjars.bower:bootstrap-sass