CVE-2024-23453

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Use of Hard-coded Credentials pada spooncast spoon. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Android Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a local attacker to retrieve the hard-coded API key when the application binary is reverse-engineered. This API key may be used for unexpected access of the associated service.

Rincian

Terbit di NVD

24 Januari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 5,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://spoon-support.spooncast.net/jp/update advisory vendor
• https://jvn.jp/en/jp/JVN96154238/ advisory pihak ketiga
• https://play.google.com/store/apps/details?id=co.spoonme&hl=en_US product