7.7

CVE-2023-4435

Exploit

Improper Input Validation in hamza417/inure

Improper Input Validation in GitHub repository hamza417/inure prior to build88.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hamza417 ≫ Inure SwPlatformandroid Version < build88
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.297
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
security@huntr.dev 7.7 2.5 5.2
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://github.com/hamza417/inure/commit/e74062e439f860fd144da4bfc3f35e96c19c3abd
Patch
Third Party Advisory
https://huntr.dev/bounties/1875ee85-4b92-4aa4-861e-094137a29276
Third Party Advisory
Exploit