Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4qwg-3cm6-6646

Опубликовано: 31 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.

LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.

EPSS

Процентиль: 31%
0.00115
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-924

Связанные уязвимости

CVSS3: 5.9
nvd
больше 2 лет назад

LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.

EPSS

Процентиль: 31%
0.00115
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-924