CVE-2015-9238 PoC — secure-compare 安全漏洞

Source

https://github.com/JamesDarf/wargame-secure_compare

Associated Vulnerability

Title: secure-compare 安全漏洞 (CVE-2015-9238)
Description:secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length.

Description

CVE-2015-9238: Insecure Comparison in secure-compare

Readme

# wargame
This is wargame!!

## CVE-2015-9238 Vulnerability in npm package secure-compare
https://www.acunetix.com/vulnerabilities/sca/cve-2015-9238-vulnerability-in-npm-package-secure-compare/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →