CVE-2023-40580
High
Description
Freighter is a Stellar chrome extension. It may be possible for a malicious website to access the recovery mnemonic phrase when the Freighter wallet is unlocked. This vulnerability impacts access control to the mnemonic recovery phrase. This issue was patched in version 5.3.1.
SeverityHigh
CVSS8.1
Exploit probability—
ProductStellar Freighter
PublishedAug 25, 2023
First seenAug 25, 2023
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- stellar freighter5.3.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stellar freighter | v < 5.3.1 | 5.3.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.