地图 / Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding)

Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding)

密码学缺陷 / Use of a Broken or Risky Cryptographic Algorithm / #2269177

厂商: Node.js
严重程度: 低危 · CVSS 6.5
赏金: —
弱点: Use of a Broken or Risky Cryptographic Algorithm
研究员: @hkario
披露日期: 2024-02-15
资产: https://github.com/nodejs/node
CVE: CVE-2023-46809

该报告还没有中文解读。

时间线

2023-12-01报告提交
2024-02-15公开披露

阅读 HackerOne 原文 ↗作者 @hkario · 版权归作者与 Node.js 所有

同类报告

0 Click account takeover via timed requests to ███████forgot-password (single-packet attack)Mars · 2024-07-11 iOS group chat denial of serviceLY Corporation · 2023-03-29 · $300 Invisible Salamanders Attack against end_to_end_encryption in NextcloudNextcloud · 2024-12-03 Weak ssh algorithms and CVE-2023-48795 Discovered on various subdomains of nextcloud.comNextcloud · 2024-05-22 Default Minimum TLS Version Set to TLS v1.0 (Cryptographic Weakness)curl · 2025-07-10 Use of a Broken or Risky Cryptographic Algorithm (CWE-327) in libcurlcurl · 2025-04-29

Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding) · 破甲 POJIA