CVE-2022-25642

Description

Obyte (formerly Byteball) Wallet before 3.4.1 allows XSS. A crafted chat message can lead to remote code execution.

Affected Platforms

Weakness Type

CWE-79

References

• https://github.com/byteball/obyte-gui-wallet/releases/tag/v3.4.1
• https://obyte.org/faq
• https://vuln.ryotak.me/advisories/64
• https://github.com/byteball/obyte-gui-wallet/releases/tag/v3.4.1
• https://obyte.org/faq
• https://vuln.ryotak.me/advisories/64