briarproject records
4 published records for vendor briarproject.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-326 Inadequate Encryption Strength1
- CWE-354 Improper Validation of Integrity Check Value1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2023-33980No exploit | Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated application crashes) vbriarproject · briar · CWE-400 | High7.5 | — | 0.8% | May 24, 2023 |
29Monitor | CVE-2023-33983No exploit | The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees.briarproject · briar · CWE-862 | High7.4 | — | 0.5% | May 24, 2023 |
26Monitor | CVE-2023-33981No exploit | Briar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group, but each spoofed message would need briarproject · briar · CWE-354 | Medium6.5 | — | 0.3% | May 24, 2023 |
23Monitor | CVE-2023-33982No exploit | Bramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt network traffic between two accountsbriarproject · briar · CWE-326 | Medium5.9 | — | 0.4% | May 24, 2023 |
- CVE-2023-3398030Monitor
Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated application crashes) v
HighCVSS 7.5No exploitEPSS 0%briarproject · briarMay 24, 2023
- CVE-2023-3398329Monitor
The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees.
HighCVSS 7.4No exploitEPSS 0%briarproject · briarMay 24, 2023
- CVE-2023-3398126Monitor
Briar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group, but each spoofed message would need
MediumCVSS 6.5No exploitEPSS 0%briarproject · briarMay 24, 2023
- CVE-2023-3398223Monitor
Bramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt network traffic between two accounts
MediumCVSS 5.9No exploitEPSS 0%briarproject · briarMay 24, 2023