Vendor archive

electrum CVEs

Beta · best-effort

3 CVEs tagged to vendor electrum — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2022-31246

Published Jun 17, 2022

paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR code data). On Windows, this can lead to capture of creden…

CVSS 5.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-1000022

Published Feb 9, 2018

Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a Missing Authorization vulnerability in JSONRPC interface that can result in Bitcoin th…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-6353

Published Jan 27, 2018

The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering attacks in which a user pastes code th…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1