AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-36325

LOW · CVSS 3.7 EPSS 0.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-10-09 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 3.7. It affects Java.

CVE
CVE-2023-36325
Severity
LOW
CVSS
3.7
EPSS
0.49%
Java

Original NVD Description

i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy (it may be dropped, or may result in a Wrong Destination response). An attack would take days to complete.