Description
Bitpay/insight-api Insight-api version 5.0.0 and earlier contains a CWE-20: input validation vulnerability in transaction broadcast endpoint that can result in Full Path Disclosure. This attack appear to be exploitable via Web request.
Remediation
References
https://github.com/bitpay/insight-api/issues/542
Related Vulnerabilities
CVE-2023-49653 Vulnerability in maven package org.jenkins-ci.plugins:jira
CVE-2022-23621 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore
CVE-2017-16092 Vulnerability in npm package sencisho
CVE-2022-24785 Vulnerability in maven package org.webjars.npm:moment
CVE-2023-46122 Vulnerability in maven package org.scala-sbt:io_2.13