system
Describe <CVE-2015-3454>.
user
What is <CVE-2015-3454>?
assistant
TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack..