mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-06-07 05:28:59 +00:00
36 lines
1.5 KiB
JSON
36 lines
1.5 KiB
JSON
{
|
|
"id": "CVE-2024-36279",
|
|
"sourceIdentifier": "vultures@jpcert.or.jp",
|
|
"published": "2024-06-17T08:15:48.980",
|
|
"lastModified": "2024-06-17T12:42:04.623",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in \"FreeFrom - the nostr client\" App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "La dependencia de la ofuscaci\u00f3n o el cifrado de entradas relevantes para la seguridad sin problemas de verificaci\u00f3n de integridad existe en las versiones de la aplicaci\u00f3n \"FreeFrom - the nostr client\" anteriores a la 1.3.5 para Android e iOS. Si se explota esta vulnerabilidad, el contenido de los mensajes directos (DM) entre usuarios puede ser manipulado mediante un ataque de intermediario."
|
|
}
|
|
],
|
|
"metrics": {},
|
|
"references": [
|
|
{
|
|
"url": "https://apps.apple.com/us/app/freefrom-the-nostr-client/id6446819930",
|
|
"source": "vultures@jpcert.or.jp"
|
|
},
|
|
{
|
|
"url": "https://freefrom.space/",
|
|
"source": "vultures@jpcert.or.jp"
|
|
},
|
|
{
|
|
"url": "https://jvn.jp/en/jp/JVN55045256/",
|
|
"source": "vultures@jpcert.or.jp"
|
|
},
|
|
{
|
|
"url": "https://play.google.com/store/apps/details?id=com.freefrom",
|
|
"source": "vultures@jpcert.or.jp"
|
|
}
|
|
]
|
|
} |