CVE-2015-3454

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site…

published September 6, 2017

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02982 · 87.1th percentile
Published
2017-09-06T21:00Z
EPSS history
Timeline
  • 06 SEP 21:00Z
    TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site…
    cvelistv5