Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vvw2-8cx5-fgfv

Опубликовано: 23 мая 2025
Источник: github
Github: Не прошло ревью
CVSS4: 4.7

Описание

Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.

Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.

EPSS

Процентиль: 10%
0.00035
Низкий

4.7 Medium

CVSS4

Дефекты

CWE-522
CWE-798

Связанные уязвимости

nvd
9 месяцев назад

Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.

EPSS

Процентиль: 10%
0.00035
Низкий

4.7 Medium

CVSS4

Дефекты

CWE-522
CWE-798