CVE-2023-29745

Sažetak

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database.

Reference

http://www.zmtqsh.com/
https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29745/CVE%20detail.md
https://play.google.com/store/apps/details?id=com.TheThaiger.android
https://play.google.com/store/apps/details?id=com.icoolme.android.weather
http://www.zmtqsh.com/
https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29745/CVE%20detail.md
https://play.google.com/store/apps/details?id=com.TheThaiger.android
https://play.google.com/store/apps/details?id=com.icoolme.android.weather

CVSS

Base:	7.1
Impact:	5.2
Exploitability:	1.8

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	HIGH	HIGH

CVSS vektor

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Zadnje važnije ažuriranje

13-01-2025 - 20:15

Objavljeno

31-05-2023 - 00:15