← All advisories

Moderate severityNVD Advisory· Published Sep 7, 2023· Updated Sep 26, 2024

CVE-2023-41646

CVE-2023-41646

Description

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
buttercupnpm	>= 2.20.3, < 7.4.0	7.4.0

Affected products

2

Buttercup/Buttercupcpe-rescue
ghsa-coords
pkg:npm/buttercup
Range: >= 2.20.3, < 7.4.0

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-7cwq-p8cr-h9qgghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-41646ghsaADVISORY
buttercup.pwghsaWEB
github.com/buttercup/buttercup-core/commit/77fbcdfe4caf57486a3c83c07fc6d36bb0e1d3e1ghsaWEB
github.com/buttercup/buttercup-core/issues/336ghsaWEB
buttercup.pwmitre

News mentions

0

No linked articles in our index yet.