Description

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js.

Remediation

References

https://github.com/blinksocks/blinksocks/issues/108

https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-50481.md

Related Vulnerabilities

CVE-2019-14540 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind

CVE-2020-25638 Vulnerability in maven package org.hibernate:hibernate-core

CVE-2023-46498 Vulnerability in npm package @evershop/evershop

CVE-2021-21368 Vulnerability in npm package msgpack5

CVE-2020-28269 Vulnerability in npm package field

Severity

High

Classification

CWE-327 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Issue Tracking Third Party Advisory