Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vq45-v67f-g42p

Опубликовано: 17 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.6
CVSS3: 4.4

Описание

A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use.

A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use.

EPSS

Процентиль: 13%
0.00043
Низкий

5.6 Medium

CVSS4

4.4 Medium

CVSS3

Дефекты

CWE-497

Связанные уязвимости

CVSS3: 4.4
nvd
около 1 года назад

A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use.

EPSS

Процентиль: 13%
0.00043
Низкий

5.6 Medium

CVSS4

4.4 Medium

CVSS3

Дефекты

CWE-497