Cryptocat Project Cryptocat — known CVE vulnerabilities

Every CVE whose affected-product data names Cryptocat Project Cryptocat, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (17)

• CVE-2013-2259 — CVSS 9.8 (critical): Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview
• CVE-2013-2260 — CVSS 9.8 (critical): Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness
• CVE-2013-4103 — CVSS 9.8 (critical): Cryptocat before 2.0.22 has Remote Script Injection due to improperly sanitizing user input
• CVE-2013-4108 — CVSS 9.8 (critical): Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.
• CVE-2013-4102 — CVSS 9.1 (critical): Cryptocat before 2.0.22 strophe.js Math.random() Random Number Generator Weakness
• CVE-2013-2257 — CVSS 7.5 (high): Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness
• CVE-2013-2261 — CVSS 7.5 (high): Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information Disclosure
• CVE-2013-2262 — CVSS 7.5 (high): Cryptocat strophe.js before 2.0.22 has information disclosure
• CVE-2013-4100 — CVSS 7.5 (high): Cryptocat before 2.0.22 has Remote Denial of Service via username
• CVE-2013-4104 — CVSS 7.5 (high): Cryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol
• CVE-2013-4105 — CVSS 7.5 (high): Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure
• CVE-2013-4106 — CVSS 6.1 (medium): A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.
• CVE-2013-4107 — CVSS 6.1 (medium): Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting
• CVE-2013-4109 — CVSS 6.1 (medium): An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.
• CVE-2013-4110 — CVSS 5.3 (medium): Cryptocat has an Unspecified Chat Participant User List Disclosure
• CVE-2013-2258 — CVSS 5.3 (medium): Cryptocat before 2.0.22 has Nickname User Impersonation
• CVE-2013-4101 — CVSS 5.3 (medium): Cryptocat before 2.0.22 Link Markup Decorator HTML Handling Weakness