Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-41951

July 31, 2024, 8:15 p.m.

CVSS Score

4.4 / 10

Product(s) Impacted

Pheonix App

  • 0.2.4

Description

Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/decoding languages are visible in code. The Problem was patched in 0.2.4.

Weaknesses

CWE-323
Reusing a Nonce, Key Pair in Encryption

Nonces should be used for the present occasion and only once.

CWE ID: 323

Date

Published: July 31, 2024, 8:15 p.m.

Last Modified: July 31, 2024, 8:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

security-advisories@github.com

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

Base Score
4.4
Exploitability Score
1.8
Impact Score
2.5
Base Severity
MEDIUM
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

References

https://github.com/ security-advisories@github.com