QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-52075

Back to search

CVE-2023-52075

Published: Dec 27, 2023

Modified: Sep 9, 2024

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all users using the API. It is recommended to implement proper error caching.

VendorProductVersions

ReVanced

revanced-api

affected
<= 71f81f7f20cd26fd707335bca9838fa3e7df20d2

Weaknesses (CWE)

CWE-755

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now