Description
An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component /presets/ssr-auth-chain.js.
Remediation
References
https://github.com/blinksocks/blinksocks/issues/108
https://github.com/tianjk99/Cryptographic-Misuses/blob/main/CVE-2023-50481.md
Related Vulnerabilities
CVE-2023-29522 Vulnerability in maven package org.xwiki.platform:xwiki-platform-xclass-ui
CVE-2024-36401 Vulnerability in maven package org.geoserver:gs-wms
CVE-2021-21297 Vulnerability in npm package @node-red/runtime
CVE-2020-8149 Vulnerability in npm package logkitty
CVE-2022-36364 Vulnerability in maven package org.apache.calcite.avatica:avatica-core