Threats tagged 'ghsa-47g8-2fh9-8w47'

A vulnerability in PipraPay 3.0.0 affects the hash_hmac function in the pp-token anti-CSRF handler component. This weakness allows remote attackers to manipulate the function, potentially leading to the exposure of hard-coded credentials. The vulnerability has a medium severity score and public exploit code is available. The project has been notified but has not yet issued a response or fix.