CVE-2023-40735highCWE-200

CVE-2023-40735: falha de alta gravidade em Cavo – Connecting for a Safer World BUTTERFLY…

Butterfly Button Project - Sensitive Information Disclosure

Publicada em 21 ago 2023 · Atualizada em 02 jul 2025

Seguir esta CVE + Monitorar BUTTERFLY BUTTON

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.8%

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFLY BUTTON (Architecture flaw) allows loss of plausible deniability and confidentiality.This issue affects BUTTERFLY BUTTON: As of 2023-08-21.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Produtos afetados

Cavo – Connecting for a Safer World · BUTTERFLY BUTTON

Referências

https://butterfly-button.web.app/https://github.com/TheButterflyButton https://github.com/TheButterflySDK https://github.com/VULSecLabs/Vulnerabilities/blob/main/CVE/CVE-2023-40735.md https://www.butterfly-button.com/https://www.vulsec.org/advisories