electrum records

3 published records for vendor electrum.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2018-6353No exploit	The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineeringelectrum · electrum · CWE-78 RCE Command injection	High7.8	—	0.5%	Jan 27, 2018
22Monitor	CVE-2018-1000022No exploit	Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a Missing Authorization vulnerability in JSONRPC electrum · bitcoin wallet · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	1.7%	Feb 9, 2018
22Monitor	CVE-2022-31246No exploit	paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR code data).electrum · electrum · CWE-88	Medium5.5	—	0.8%	Jun 17, 2022

CVE-2018-6353
31Monitor
The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (1) social-engineering
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Command injection
electrum · electrumJan 27, 2018
CVE-2018-1000022
22Monitor
Electrum Technologies GmbH Electrum Bitcoin Wallet version prior to version 3.0.5 contains a Missing Authorization vulnerability in JSONRPC
MediumCVSS 5.3No exploitEPSS 2%
- Pre-auth
- Broken access control (IDOR)
electrum · bitcoin walletFeb 9, 2018
CVE-2022-31246
22Monitor
paymentrequest.py in Electrum before 4.2.2 allows a file:// URL in the r parameter of a payment request (e.g., within QR code data).
MediumCVSS 5.5No exploitEPSS 1%
electrum · electrumJun 17, 2022