VYPR

ScratchVerifier

by Scratchverifier

CVEs (1)

  • CVE-2020-26236Nov 20, 2020
    risk 0.00cvss epss 0.01

    In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site that uses ScratchVerifier for logins. A possible exploitation would follow these steps: 1. User starts login process. 2. Attacker attempts…