Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-47931
Summary
The package github.com/binance-chain/tss-lib prior to v2.0.0 allows a collision of hash values.
- LOW
- NETWORK
- HIGH
- UNCHANGED
- NONE
- NONE
- HIGH
- NONE
CWE-327 - Use of a Broken or Risky Cryptographic Algorithm
The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information.
References
Advisory Timeline
- Published