Description
Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request.
Remediation
References
https://github.com/bitpay/insight-api/issues/542
Related Vulnerabilities
CVE-2023-43643 Vulnerability in maven package org.owasp.antisamy:antisamy
CVE-2020-15362 Vulnerability in npm package wifiscanner
CVE-2020-35211 Vulnerability in maven package io.atomix:atomix
CVE-2018-1002201 Vulnerability in maven package org.zeroturnaround:zt-zip
CVE-2021-34078 Vulnerability in npm package lifion-verify-deps