Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9xm2-c28x-g93r

Опубликовано: 31 окт. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.

LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.

EPSS

Процентиль: 31%
0.00115
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-924

Связанные уязвимости

CVSS3: 5.9
nvd
больше 2 лет назад

LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM (man-in-the-middle) attacker.

EPSS

Процентиль: 31%
0.00115
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-924