Lucene search
JpcertCVE-2024-36277HistoryJun 17, 2024 - 8:15 a.m.
CVE-2024-36277
2024-06-1708:15:48
CWE-347
jpcert
web.nvd.nist.gov
28
cryptographic signature
freefrom
android
ios
event data
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI Score
6.8
Confidence
Low
Improper verification of cryptographic signature issue exists in “FreeFrom - the nostr client” App versions prior to 1.3.5 for Android and iOS. The affected app cannot detect event data with invalid signatures.
Affected configurations
Node
freefrom_k.k.\"freefrom_-_the_nostr_client\"_app_for_androidRange<1.3.5
freefrom_k.k.\"freefrom_-_the_nostr_client\"_app_for_iosRange<1.3.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| freefrom_k.k. | \"freefrom_-_the_nostr_client\"_app_for_android | * | cpe:2.3:a:freefrom_k.k.:\"freefrom_-_the_nostr_client\"_app_for_android:*:*:*:*:*:*:*:* |
| freefrom_k.k. | \"freefrom_-_the_nostr_client\"_app_for_ios | * | cpe:2.3:a:freefrom_k.k.:\"freefrom_-_the_nostr_client\"_app_for_ios:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "FreeFrom K.K.",
"product": "\"FreeFrom - the nostr client\" App for Android",
"versions": [
{
"version": "prior to 1.3.5",
"status": "affected"
}
]
},
{
"vendor": "FreeFrom K.K.",
"product": "\"FreeFrom - the nostr client\" App for iOS",
"versions": [
{
"version": "prior to 1.3.5",
"status": "affected"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-36277
2024-06-17 07:33:55
nvd
nvd
CVE-2024-36277
2024-06-17 08:15:48
cvelist
cvelist
CVE-2024-36277
2024-06-17 07:33:55
jvn
jvn
JVN#55045256: Multiple vulnerabilities in "FreeFrom - the nostr client" App
2024-06-07 00:00:00
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
AI Score
6.8
Confidence
Low
Related for CVE-2024-36277