CVE Database
/

CVE-2024-36279

Back to search

CVE-2024-36279

Published: Jun 17, 2024

Modified: Aug 2, 2024

PUBLISHED

Description

Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages (DMs) between users may be manipulated by a man-in-the-middle attack.

VendorProductVersions

FreeFrom K.K.

"FreeFrom - the nostr client" App for Android

affected
prior to 1.3.5

FreeFrom K.K.

"FreeFrom - the nostr client" App for iOS

affected
prior to 1.3.5

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now