Approved changes feed: RSS · Atom

cpe:2.3:a:paysafe:barzahlen_payment_module_php_sdk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPaysafe (a0a6aa76-38ae-515c-adbf-290ecee6c52a)
ProductBarzahlen Payment Module Php Sdk (3db3948e-9d66-50e6-9c90-50cb18ed2b18)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/viafintech/barzahlen-php purl2cpe 2026-06-01 10:16:08.960586

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-15015 vulnerable 2026-06-08 05:07:26.195791 viafintech Barzahlen Payment Module PHP SDK Webhook.php verify timing discrepancy
LOW (2.6)
A vulnerability, which was classified as problematic, was found in viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. Affected is the function verify of the file src/Webhook.php. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 2.0.1 is able to address this issue. The patch is identified as 3e7d29dc0ca6c054a6d6e211f32dae89078594c1. It is recommended to upgrade the affected component. VDB-217650 is the identifier assigned to this vulnerability.
Published: 2023-01-08T17:15:32.447Z
Updated: 2024-08-06T03:47:34.830Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.