CVE-2024-0245: falha de média gravidade em hamza417/inure
Task Hijacking in hamza417/inure
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 0.2%
A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the exposure of sensitive information. An attacker can create a malicious app that hijacks the legitimate Inure app, intercepting and stealing sensitive information when installed on the victim's device. This issue affects all Android versions before Android 11.
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
hamza417 · hamza417/inureCVEs relacionadas — hamza417/inure
No mesmo produto, das mais perigosas para as menos.
CVE-2023-4877MEDIUMExposure of Sensitive Information to an Unauthorized Actor in hamza417/inureEPSS 0.4%CVE-2023-4435HIGHImproper Input Validation in hamza417/inureEPSS 0.4%CVE-2023-4876HIGHExposure of Sensitive Information to an Unauthorized Actor in hamza417/inureEPSS 0.4%CVE-2023-4434MEDIUMMissing Authorization in hamza417/inureEPSS 0.3%CVE-2023-5321MEDIUMMissing Authorization in hamza417/inureEPSS 0.3%CVE-2023-5862MEDIUMMissing Authorization in hamza417/inureEPSS 0.3%