7.5

CVE-2023-27643

Exploit
An issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause a denial of service via the Rescan button in Queue and Select Folders button in Library
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Powerampapp ≫ Poweramp Version925-bundle-play
Powerampapp ≫ Poweramp Version954-uni
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.47% 0.703
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADP 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://play.google.com/store/apps/details?id=com.maxmpz.audioplayer
Product
https://powerampapp.com/
Product
https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27643/CVE%20detail.md
Third Party Advisory
Exploit