Elliptic Php
1 CVEs
product
Monthly
In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
PHP
Information Disclosure
Elliptic Php
NVD
CVSS 3.1
7.4
EPSS
1.1%
CVE-2019-10764
PHP
EPSS 1%
CVSS 7.4
HIGH
POC
PATCH
This Week
In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
PHP
Information Disclosure
Elliptic Php
NVD