Packagist/barzahlen/barzahlen-php CVE-2016-15015: medium 5.3, EPSS 0.66%

Barzahlen Payment Module PHP SDK vulnerable to Observable Timing Discrepancy

Action: Upgrade barzahlen/barzahlen-php to 2.0.1 or later.

composer require barzahlen/barzahlen-php:2.0.1

Affected

Fixed versions

Sources

• osv: GHSA-vg5x-6q66-rvgx
• https://nvd.nist.gov/vuln/detail/CVE-2016-15015
• https://github.com/viafintech/Barzahlen-PHP/pull/8
• https://github.com/viafintech/Barzahlen-PHP/commit/3e7d29dc0ca6c054a6d6e211f32dae89078594c1
• https://github.com/viafintech/Barzahlen-PHP
• https://github.com/viafintech/Barzahlen-PHP/releases/tag/v2.0.1
• https://vuldb.com/?ctiid.217650
• https://vuldb.com/?id.217650

CVE-2016-15015 · published 2023-01-08T18:30:25Z · modified 2023-11-08T03:58:22.504970Z · JSON