{"id":75438,"date":"2023-03-13T13:38:57","date_gmt":"2023-03-13T11:38:57","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=75438"},"modified":"2025-09-10T11:40:45","modified_gmt":"2025-09-10T08:40:45","slug":"opensea-closes-vulnerability-that-could-have-exposed-users-personal-data","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/opensea-closes-vulnerability-that-could-have-exposed-users-personal-data\/","title":{"rendered":"OpenSea closes vulnerability that could have exposed users&#8217; personal data"},"content":{"rendered":"<p>The OpenSea NFT marketplace team fixed a vulnerability that threatened to expose user data. The issue was discovered by Imperva security researchers.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">Imperva Red Team discovered a cross-site search vulnerability affecting the <a href=\"https:\/\/twitter.com\/hashtag\/NFT?src=hash&#038;ref_src=twsrc%5Etfw\">#NFT<\/a> marketplace <a href=\"https:\/\/twitter.com\/hashtag\/OpenSea?src=hash&#038;ref_src=twsrc%5Etfw\">#OpenSea<\/a>.<\/p>\n<p>This vulnerability allows for the deanonymization of users, potentially revealing a user&#8217;s identity. <a href=\"https:\/\/t.co\/nGQWceeGEc\">https:\/\/t.co\/nGQWceeGEc<\/a><\/p>\n<p>\u2014 Imperva (@Imperva) <a href=\"https:\/\/twitter.com\/Imperva\/status\/1633832032756449280?ref_src=twsrc%5Etfw\">March 9, 2023<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Security researchers found that the bug allowed de-anonymizing users of the platform by linking an IP address, browser session data, and email to a specific NFT.<\/p>\n<p>According to experts, the cause of the bug was a misconfiguration of the <span data-descr=\"iframe for embedding data from another site\" class=\"old_tooltip\">iFrame<\/span>-resizer library. The vulnerability allowed data to be aggregated through cross-site search.<\/p>\n<p>Using information returned in responses, an attacker could then send phishing links to a potential victim.<\/p>\n<p>Earlier in December 2022, OpenSea <a href=\"https:\/\/u1f987.com\/en\/news\/bored-ape-tokens-worth-millions-stolen-from-opensea\">became victims of an attack<\/a> worth several million dollars.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The OpenSea NFT marketplace team fixed a vulnerability that threatened to expose user data. The issue was discovered by Imperva security researchers.<\/p>\n","protected":false},"author":1,"featured_media":75439,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1301,1265],"class_list":["post-75438","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-blockchain-vulnerabilities","tag-opensea"],"aioseo_notices":[],"amp_enabled":true,"views":"13","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/75438","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=75438"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/75438\/revisions"}],"predecessor-version":[{"id":75440,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/75438\/revisions\/75440"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/75439"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=75438"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=75438"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=75438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}