Lucene search
@huntrdevVULNRICHMENT:CVE-2023-4877HistorySep 10, 2023 - 12:00 a.m.
CVE-2023-4877 Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure
2023-09-1000:00:42
CWE-200
@huntrdev
github.com
cve-2023-4877
unauthorized actor
sensitive information
github repository
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92.
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:hamza417:inure:*:*:*:*:*:android:*:*"
],
"vendor": "hamza417",
"product": "inure",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "build92",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]Related
huntr
huntr
Android Manifest Misconfiguration Leading to Task Hijacking
2023-08-20 19:39:00
osv
osv
CVE-2023-4877
2023-09-10 01:15:08
nvd
nvd
CVE-2023-4877
2023-09-10 01:15:08
cve
cve
CVE-2023-4877
2023-09-10 01:15:08
prion
prion
Hardcoded credentials
2023-09-10 01:15:00
cvelist
cvelist
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
6.8
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-4877